[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1i-FLqcF8PJm9NLIm4LIUVVYmoa6gZJs-le13Jb6dU0":3,"g5a-family:redhat\u002Fenterprise_linux_for_power_little_endian":239,"g5a-ex:redhat\u002Fenterprise_linux_for_power_little_endian@*":243},{"success":4,"data":5},true,{"product":6,"versions":47,"topVulnerabilitiesByEpss":58,"kevVulnerabilities":118,"seoMetadata":217,"meta":236},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":46},"redhat","enterprise_linux_for_power_little_endian",10,103,15,"2025-06-12",[14,19,23,26,29,33,35,37,40,43],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"10.0_ppc64le",1,0,false,{"version":20,"cve_count":21,"kev_count":22,"has_kev":4},"7.0",27,4,{"version":24,"cve_count":9,"kev_count":25,"has_kev":4},"7.0_ppc64le",8,{"version":27,"cve_count":28,"kev_count":22,"has_kev":4},"8.0",47,{"version":30,"cve_count":31,"kev_count":32,"has_kev":4},"8.0_ppc64le",22,2,{"version":34,"cve_count":16,"kev_count":17,"has_kev":18},"8.6",{"version":36,"cve_count":16,"kev_count":17,"has_kev":18},"8.8_ppc64le",{"version":38,"cve_count":39,"kev_count":17,"has_kev":18},"9.0",13,{"version":41,"cve_count":42,"kev_count":16,"has_kev":4},"9.0_ppc64le",16,{"version":44,"cve_count":45,"kev_count":17,"has_kev":18},"9.2_ppc64le",5,"Enterprise Linux For Power Little Endian by Redhat is a technology product with 10 tracked versions and 103 known security vulnerabilities including 15 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[48,49,50,51,52,53,54,55,56,57],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":22,"has_kev":4},{"version":24,"cve_count":9,"kev_count":25,"has_kev":4},{"version":27,"cve_count":28,"kev_count":22,"has_kev":4},{"version":30,"cve_count":31,"kev_count":32,"has_kev":4},{"version":34,"cve_count":16,"kev_count":17,"has_kev":18},{"version":36,"cve_count":16,"kev_count":17,"has_kev":18},{"version":38,"cve_count":39,"kev_count":17,"has_kev":18},{"version":41,"cve_count":42,"kev_count":16,"has_kev":4},{"version":44,"cve_count":45,"kev_count":17,"has_kev":18},[59,67,74,79,84,90,96,102,108,113],{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":64,"severity":65,"isKev":4,"epssScore":66},"CVE-2021-40438","A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","2021-09-16",9,"v3.1","Critical",0.99999,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":64,"severity":72,"isKev":4,"epssScore":73},"CVE-2017-12617","When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.","2017-10-04",8.1,"High",0.99988,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":71,"cvssVersion":64,"severity":72,"isKev":4,"epssScore":78},"CVE-2017-12615","When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.","2017-09-19",0.99607,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":71,"cvssVersion":64,"severity":72,"isKev":18,"epssScore":83},"CVE-2024-6387","A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.","2024-07-01",0.99506,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":88,"cvssVersion":64,"severity":72,"isKev":4,"epssScore":89},"CVE-2019-11043","In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.","2019-10-28",8.7,0.9947,{"cveId":91,"description":92,"publishedDate":93,"cvssScore":94,"cvssVersion":64,"severity":65,"isKev":4,"epssScore":95},"CVE-2019-5544","OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.","2019-12-06",9.8,0.96823,{"cveId":97,"description":98,"publishedDate":99,"cvssScore":100,"cvssVersion":64,"severity":72,"isKev":4,"epssScore":101},"CVE-2021-4034","A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","2022-01-28",7.8,0.94921,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":106,"cvssVersion":64,"severity":72,"isKev":18,"epssScore":107},"CVE-2020-9490","Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP\u002F2 request would result in a crash when the server actually tries to HTTP\u002F2 PUSH a resource afterwards. Configuring the HTTP\u002F2 feature via \"H2Push off\" will mitigate this vulnerability for unpatched servers.","2020-08-07",7.5,0.89744,{"cveId":109,"description":110,"publishedDate":111,"cvssScore":100,"cvssVersion":64,"severity":72,"isKev":4,"epssScore":112},"CVE-2022-0847","A flaw was found in the way the \"flags\" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.","2022-03-10",0.88106,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":106,"cvssVersion":64,"severity":72,"isKev":18,"epssScore":117},"CVE-2023-46847","Squid is vulnerable to a Denial of Service,  where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.","2023-11-03",0.85944,[119,128,137,145,150,159,163,167,170,173,180,189,192,196,203,211],{"cveId":120,"description":121,"publishedDate":122,"cvssScore":100,"severity":72,"isKev":4,"epssScore":123,"cisaVulnName":124,"cisaDateAdded":125,"cisaShortDescription":126,"cisaRequiredAction":127},"CVE-2022-0492","A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel\u002Fcgroup\u002Fcgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.","2022-03-03",0.05528,"Linux Kernel Improper Authentication Vulnerability","2026-06-02","Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":129,"description":130,"publishedDate":131,"cvssScore":100,"severity":72,"isKev":4,"epssScore":132,"cisaVulnName":133,"cisaDateAdded":134,"cisaShortDescription":135,"cisaRequiredAction":136},"CVE-2024-1086","A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nThe nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.\n\nWe recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.","2024-01-31",0.28058,"Linux Kernel Use-After-Free Vulnerability","2024-05-30","Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":138,"description":139,"publishedDate":140,"cvssScore":100,"severity":72,"isKev":4,"epssScore":141,"cisaVulnName":142,"cisaDateAdded":143,"cisaShortDescription":144,"cisaRequiredAction":136},"CVE-2023-4911","A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","2023-10-03",0.81422,"GNU C Library Buffer Overflow Vulnerability","2023-11-21","GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.",{"cveId":97,"description":98,"publishedDate":99,"cvssScore":100,"severity":72,"isKev":4,"epssScore":101,"cisaVulnName":146,"cisaDateAdded":147,"cisaShortDescription":148,"cisaRequiredAction":149},"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","2022-06-27","The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.","Apply updates per vendor instructions.",{"cveId":151,"description":152,"publishedDate":153,"cvssScore":154,"severity":72,"isKev":4,"epssScore":155,"cisaVulnName":156,"cisaDateAdded":157,"cisaShortDescription":158,"cisaRequiredAction":149},"CVE-2019-8720","A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.","2023-03-06",8.8,0.01543,"WebKitGTK Memory Corruption Vulnerability","2022-05-23","WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.",{"cveId":109,"description":110,"publishedDate":111,"cvssScore":100,"severity":72,"isKev":4,"epssScore":112,"cisaVulnName":160,"cisaDateAdded":161,"cisaShortDescription":162,"cisaRequiredAction":149},"Linux Kernel Privilege Escalation Vulnerability","2022-04-25","Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of \"Dirty Pipe.\"",{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"severity":72,"isKev":4,"epssScore":73,"cisaVulnName":164,"cisaDateAdded":165,"cisaShortDescription":166,"cisaRequiredAction":149},"Apache Tomcat Remote Code Execution Vulnerability","2022-03-25","When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.",{"cveId":85,"description":86,"publishedDate":87,"cvssScore":88,"severity":72,"isKev":4,"epssScore":89,"cisaVulnName":168,"cisaDateAdded":165,"cisaShortDescription":169,"cisaRequiredAction":149},"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.",{"cveId":75,"description":76,"publishedDate":77,"cvssScore":71,"severity":72,"isKev":4,"epssScore":78,"cisaVulnName":171,"cisaDateAdded":165,"cisaShortDescription":172,"cisaRequiredAction":149},"Apache Tomcat on Windows Remote Code Execution Vulnerability","When running Apache Tomcat on Windows with HTTP PUTs enabled, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.",{"cveId":174,"description":175,"publishedDate":176,"cvssScore":94,"severity":65,"isKev":4,"epssScore":177,"cisaVulnName":178,"cisaDateAdded":122,"cisaShortDescription":179,"cisaRequiredAction":149},"CVE-2015-2590","Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.","2015-07-16",0.25469,"Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability","An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.",{"cveId":181,"description":182,"publishedDate":183,"cvssScore":184,"severity":185,"isKev":4,"epssScore":186,"cisaVulnName":187,"cisaDateAdded":122,"cisaShortDescription":188,"cisaRequiredAction":149},"CVE-2015-4902","Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.","2015-10-22",5.3,"Medium",0.13354,"Oracle Java SE Integrity Check Vulnerability","Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.",{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"severity":65,"isKev":4,"epssScore":66,"cisaVulnName":190,"cisaDateAdded":191,"cisaShortDescription":61,"cisaRequiredAction":149},"Apache HTTP Server-Side Request Forgery (SSRF)","2021-12-01",{"cveId":91,"description":92,"publishedDate":93,"cvssScore":94,"severity":65,"isKev":4,"epssScore":95,"cisaVulnName":193,"cisaDateAdded":194,"cisaShortDescription":195,"cisaRequiredAction":149},"VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability","2021-11-03","VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution.",{"cveId":197,"description":198,"publishedDate":199,"cvssScore":100,"severity":72,"isKev":4,"epssScore":200,"cisaVulnName":201,"cisaDateAdded":194,"cisaShortDescription":202,"cisaRequiredAction":149},"CVE-2019-0211","In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.","2019-04-08",0.65005,"Apache HTTP Server Privilege Escalation Vulnerability","Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.",{"cveId":204,"description":205,"publishedDate":206,"cvssScore":207,"severity":185,"isKev":4,"epssScore":208,"cisaVulnName":209,"cisaDateAdded":194,"cisaShortDescription":210,"cisaRequiredAction":149},"CVE-2016-3718","The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.","2016-05-05",5.5,0.76897,"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.",{"cveId":212,"description":213,"publishedDate":206,"cvssScore":207,"severity":185,"isKev":4,"epssScore":214,"cisaVulnName":215,"cisaDateAdded":194,"cisaShortDescription":216,"cisaRequiredAction":149},"CVE-2016-3715","The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.",0.75383,"ImageMagick Arbitrary File Deletion Vulnerability","ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.",{"title":218,"metaDescription":219,"keywords":220,"structuredData":221},"Enterprise Linux For Power Little Endian by Redhat - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Enterprise Linux For Power Little Endian by Redhat covering 10 versions with 103 tracked vulnerabilities including 3 critical and 10 high-severity issues and 15 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Enterprise Linux For Power Little Endian vulnerabilities, Enterprise Linux For Power Little Endian security, Enterprise Linux For Power Little Endian CVE, Redhat Enterprise Linux For Power Little Endian, Enterprise Linux For Power Little Endian threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Enterprise Linux For Power Little Endian KEV, Enterprise Linux For Power Little Endian exploited vulnerabilities",{"@context":222,"@type":223,"name":224,"description":219,"url":225,"manufacturer":226,"applicationCategory":230,"softwareVersion":231,"mainEntity":232},"https:\u002F\u002Fschema.org","SoftwareApplication","Enterprise Linux For Power Little Endian","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fenterprise_linux_for_power_little_endian",{"@type":227,"name":228,"url":229},"Organization","Redhat","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fredhat","Security Software","10 versions tracked",{"@type":233,"name":234,"description":235,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Enterprise Linux For Power Little Endian Security Vulnerabilities","Security vulnerabilities affecting Enterprise Linux For Power Little Endian by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":237,"apiVersion":238},"2026-10-28T13:53:48.287Z","3.0",[240],{"product":241,"cves":242},"enterprise_linux_for_power_little_endian_eus",89,{"rows":244,"total":42,"capped":18,"failed":17},[245,249,253,257,261,265,269,273,277,281,285,289,293,297,301,305],{"cveId":120,"name":124,"severity":72,"cvss":100,"added":125,"epss":123,"published":246,"ranges":247,"checked":4,"hits":248,"covers":18},"2022-03-03T19:15:08.633",[27],[],{"cveId":129,"name":133,"severity":72,"cvss":100,"added":134,"epss":132,"published":250,"ranges":251,"checked":4,"hits":252,"covers":18},"2024-01-31T13:15:10.827",[24],[],{"cveId":138,"name":142,"severity":72,"cvss":100,"added":143,"epss":141,"published":254,"ranges":255,"checked":4,"hits":256,"covers":18},"2023-10-03T18:15:10.463",[41],[],{"cveId":97,"name":146,"severity":72,"cvss":100,"added":147,"epss":101,"published":258,"ranges":259,"checked":4,"hits":260,"covers":18},"2022-01-28T20:15:12.193",[20,27],[],{"cveId":151,"name":156,"severity":72,"cvss":154,"added":157,"epss":155,"published":262,"ranges":263,"checked":4,"hits":264,"covers":18},"2023-03-06T23:15:10.287",[20,27],[],{"cveId":109,"name":160,"severity":72,"cvss":100,"added":161,"epss":112,"published":266,"ranges":267,"checked":4,"hits":268,"covers":18},"2022-03-10T17:44:57.283",[27],[],{"cveId":68,"name":164,"severity":72,"cvss":71,"added":165,"epss":73,"published":270,"ranges":271,"checked":4,"hits":272,"covers":18},"2017-10-04T01:29:02.12",[20],[],{"cveId":85,"name":168,"severity":72,"cvss":88,"added":165,"epss":89,"published":274,"ranges":275,"checked":4,"hits":276,"covers":18},"2019-10-28T15:15:13.863",[24,30],[],{"cveId":75,"name":171,"severity":72,"cvss":71,"added":165,"epss":78,"published":278,"ranges":279,"checked":4,"hits":280,"covers":18},"2017-09-19T13:29:00.19",[24],[],{"cveId":174,"name":178,"severity":65,"cvss":94,"added":122,"epss":177,"published":282,"ranges":283,"checked":4,"hits":284,"covers":18},"2015-07-16T10:59:17.05",[24],[],{"cveId":181,"name":187,"severity":185,"cvss":184,"added":122,"epss":186,"published":286,"ranges":287,"checked":4,"hits":288,"covers":18},"2015-10-22T00:00:03.093",[24],[],{"cveId":60,"name":190,"severity":65,"cvss":63,"added":191,"epss":66,"published":290,"ranges":291,"checked":4,"hits":292,"covers":18},"2021-09-16T15:15:07.633",[20,27],[],{"cveId":91,"name":193,"severity":65,"cvss":94,"added":194,"epss":95,"published":294,"ranges":295,"checked":4,"hits":296,"covers":18},"2019-12-06T16:15:11.467",[24],[],{"cveId":197,"name":201,"severity":72,"cvss":100,"added":194,"epss":200,"published":298,"ranges":299,"checked":4,"hits":300,"covers":18},"2019-04-08T22:29:00.387",[30],[],{"cveId":204,"name":209,"severity":185,"cvss":207,"added":194,"epss":208,"published":302,"ranges":303,"checked":4,"hits":304,"covers":18},"2016-05-05T18:59:08.96",[24],[],{"cveId":212,"name":215,"severity":185,"cvss":207,"added":194,"epss":214,"published":306,"ranges":307,"checked":4,"hits":308,"covers":18},"2016-05-05T18:59:04.727",[24],[]]