# Redhat Software Collections


- [CVE-2021-40438](https://insights.sbomify.com/CVE-2021-40438/): Apache HTTP Server-Side Request Forgery (SSRF) (critical 9.0, exploited in the wild)
- [CVE-2019-11043](https://insights.sbomify.com/CVE-2019-11043/): PHP FastCGI Process Manager (FPM) Buffer Overflow (high 8.7, exploited in the wild)
- [CVE-2019-0211](https://insights.sbomify.com/CVE-2019-0211/): Apache HTTP Server Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-5418](https://insights.sbomify.com/CVE-2019-5418/): Rails Ruby on Rails Path Traversal (high 7.5, exploited in the wild)
- [CVE-2016-0752](https://insights.sbomify.com/CVE-2016-0752/): Ruby on Rails Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2019-10196](https://insights.sbomify.com/CVE-2019-10196/): Resource Exhaustion Denial of Service in http-proxy-agent (critical 9.8)
- [CVE-2014-4650](https://insights.sbomify.com/CVE-2014-4650/): Path traversal in n/a (critical 9.8)
- [CVE-2019-15605](https://insights.sbomify.com/CVE-2019-15605/): Other in Node (critical 9.8)
- [CVE-2019-17570](https://insights.sbomify.com/CVE-2019-17570/): Insecure Deserialization in Apache XML-RPC (critical 9.8)
- [CVE-2015-7545](https://insights.sbomify.com/CVE-2015-7545/): Command injection in n/a (critical 9.8)
- [CVE-2023-5869](https://insights.sbomify.com/CVE-2023-5869/): Postgresql: buffer overrun from integer overflow in array modification (high 8.8)
- [CVE-2021-3656](https://insights.sbomify.com/CVE-2021-3656/): Privilege escalation in KVM (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/redhat/software-collections/