{"metadata": {"count": 316320, "page": 1, "per_page": 100}, "data": [{"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:48:43+00:00", "cve": "CVE-2016-4472", "id": "CVE-2016-4472", "initial_release_date": "2016-05-15T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "expat: Undefined behavior and pointer overflows", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4472.json", "version": "3", "product_status": {"known_affected": 25, "known_not_affected": 52, "under_investigation": 1}, "imported": 1793857723.0, "vulnerability_id": "CVE-2016-4472", "vulnerability_url": "/vuln/CVE-2016-4472"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:48:37+00:00", "cve": "CVE-2016-4463", "id": "CVE-2016-4463", "initial_release_date": "2016-06-29T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xerces-c: Stack overflow when parsing deeply nested DTD", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4463.json", "version": "3", "product_status": {"fixed": 147, "known_affected": 4, "under_investigation": 6}, "imported": 1793857717.0, "vulnerability_id": "CVE-2016-4463", "vulnerability_url": "/vuln/CVE-2016-4463"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:48:35+00:00", "cve": "CVE-2016-4456", "id": "CVE-2016-4456", "initial_release_date": "2016-06-06T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "gnutls: Environment variable GNUTLS_KEYLOGFILE is obtained via insecure getenv()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4456.json", "version": "3", "product_status": {"known_not_affected": 15}, "imported": 1793857715.0, "vulnerability_id": "CVE-2016-4456", "vulnerability_url": "/vuln/CVE-2016-4456"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:48:34+00:00", "cve": "CVE-2016-4454", "id": "CVE-2016-4454", "initial_release_date": "2016-05-30T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Qemu: display: vmsvga: out-of-bounds read in vmsvga_fifo_read_raw() routine", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4454.json", "version": "3", "product_status": {"known_affected": 18, "known_not_affected": 19}, "imported": 1793857714.0, "vulnerability_id": "CVE-2016-4454", "vulnerability_url": "/vuln/CVE-2016-4454"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:48:33+00:00", "cve": "CVE-2016-4455", "id": "CVE-2016-4455", "initial_release_date": "2016-05-25T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "subscription-manager: sensitive world readable files in /var/lib/rhsm/", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4455.json", "version": "3", "product_status": {"fixed": 210, "known_affected": 1}, "imported": 1793857713.0, "vulnerability_id": "CVE-2016-4455", "vulnerability_url": "/vuln/CVE-2016-4455"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:48:29+00:00", "cve": "CVE-2016-4449", "id": "CVE-2016-4449", "initial_release_date": "2016-05-23T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libxml2: Inappropriate fetch of entities content", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4449.json", "version": "3", "product_status": {"fixed": 145, "known_affected": 2}, "imported": 1793857709.0, "vulnerability_id": "CVE-2016-4449", "vulnerability_url": "/vuln/CVE-2016-4449"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:48:25+00:00", "cve": "CVE-2016-4448", "id": "CVE-2016-4448", "initial_release_date": "2016-05-23T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libxml2: Format string vulnerability", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4448.json", "version": "3", "product_status": {"fixed": 145, "known_affected": 2}, "imported": 1793857705.0, "vulnerability_id": "CVE-2016-4448", "vulnerability_url": "/vuln/CVE-2016-4448"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:48:25+00:00", "cve": "CVE-2016-4447", "id": "CVE-2016-4447", "initial_release_date": "2016-05-23T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libxml2: Heap-based buffer underreads due to xmlParseName", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4447.json", "version": "3", "product_status": {"fixed": 145, "known_affected": 2}, "imported": 1793857705.0, "vulnerability_id": "CVE-2016-4447", "vulnerability_url": "/vuln/CVE-2016-4447"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:48:23+00:00", "cve": "CVE-2016-4445", "id": "CVE-2016-4445", "initial_release_date": "2016-06-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "setroubleshoot: insecure use of commands.getstatusoutput in sealert", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4445.json", "version": "3", "product_status": {"fixed": 73, "known_not_affected": 1}, "imported": 1793857703.0, "vulnerability_id": "CVE-2016-4445", "vulnerability_url": "/vuln/CVE-2016-4445"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:48:19+00:00", "cve": "CVE-2016-4441", "id": "CVE-2016-4441", "initial_release_date": "2016-05-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in get_cmd", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4441.json", "version": "3", "product_status": {"known_not_affected": 44}, "imported": 1793857699.0, "vulnerability_id": "CVE-2016-4441", "vulnerability_url": "/vuln/CVE-2016-4441"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:48:16+00:00", "cve": "CVE-2016-4440", "id": "CVE-2016-4440", "initial_release_date": "2016-05-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Kernel: kvm: vmx: incorrect state update leading to MSR access", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4440.json", "version": "3", "product_status": {"known_not_affected": 55}, "imported": 1793857696.0, "vulnerability_id": "CVE-2016-4440", "vulnerability_url": "/vuln/CVE-2016-4440"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:48:14+00:00", "cve": "CVE-2016-4439", "id": "CVE-2016-4439", "initial_release_date": "2016-05-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in esp_reg_write", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4439.json", "version": "3", "product_status": {"known_not_affected": 44}, "imported": 1793857694.0, "vulnerability_id": "CVE-2016-4439", "vulnerability_url": "/vuln/CVE-2016-4439"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:48:13+00:00", "cve": "CVE-2016-4434", "id": "CVE-2016-4434", "initial_release_date": "2016-05-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tika: XML External Entity vulnerability", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4434.json", "version": "3", "product_status": {"fixed": 3, "known_affected": 4, "known_not_affected": 1, "under_investigation": 1}, "imported": 1793857693.0, "vulnerability_id": "CVE-2016-4434", "vulnerability_url": "/vuln/CVE-2016-4434"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:48:13+00:00", "cve": "CVE-2016-4431", "id": "CVE-2016-4431", "initial_release_date": "2016-06-17T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "struts: Possible manipulation of return result and bypassing validation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4431.json", "version": "3", "product_status": {"known_not_affected": 2}, "imported": 1793857693.0, "vulnerability_id": "CVE-2016-4431", "vulnerability_url": "/vuln/CVE-2016-4431"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:48:11+00:00", "cve": "CVE-2016-4433", "id": "CVE-2016-4433", "initial_release_date": "2016-06-17T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "struts: Bypassing internal security mechanisms by crafted request", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4433.json", "version": "3", "product_status": {"known_not_affected": 2}, "imported": 1793857691.0, "vulnerability_id": "CVE-2016-4433", "vulnerability_url": "/vuln/CVE-2016-4433"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:48:06+00:00", "cve": "CVE-2016-4430", "id": "CVE-2016-4430", "initial_release_date": "2016-06-17T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "struts: Bypassing token validation triggered by malicious expression", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4430.json", "version": "3", "product_status": {"known_not_affected": 2}, "imported": 1793857686.0, "vulnerability_id": "CVE-2016-4430", "vulnerability_url": "/vuln/CVE-2016-4430"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:48:03+00:00", "cve": "CVE-2016-4429", "id": "CVE-2016-4429", "initial_release_date": "2016-05-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "glibc: libtirpc: stack (frame) overflow in Sun RPC clntudp_call()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4429.json", "version": "3", "product_status": {"known_affected": 11, "known_not_affected": 233}, "imported": 1793857683.0, "vulnerability_id": "CVE-2016-4429", "vulnerability_url": "/vuln/CVE-2016-4429"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:48:01+00:00", "cve": "CVE-2016-4425", "id": "CVE-2016-4425", "initial_release_date": "2016-05-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "jansson: stack exhaustion parsing a JSON file", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4425.json", "version": "3", "product_status": {"known_affected": 3}, "imported": 1793857681.0, "vulnerability_id": "CVE-2016-4425", "vulnerability_url": "/vuln/CVE-2016-4425"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:48:00+00:00", "cve": "CVE-2016-4421", "id": "CVE-2016-4421", "initial_release_date": "2016-02-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wireshark: ASN.1 BER dissector crash. (wnpa-sec-2016-18)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4421.json", "version": "3", "product_status": {"known_affected": 9}, "imported": 1793857680.0, "vulnerability_id": "CVE-2016-4421", "vulnerability_url": "/vuln/CVE-2016-4421"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:58+00:00", "cve": "CVE-2016-4420", "id": "CVE-2016-4420", "initial_release_date": "2016-02-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wireshark: NFS dissector crash (wnpa-sec-2016-17)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4420.json", "version": "3", "product_status": {"known_not_affected": 9}, "imported": 1793857678.0, "vulnerability_id": "CVE-2016-4420", "vulnerability_url": "/vuln/CVE-2016-4420"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:58+00:00", "cve": "CVE-2016-4418", "id": "CVE-2016-4418", "initial_release_date": "2016-02-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wireshark: ASN.1 BER dissector crash (wnpa-sec-2016-15)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4418.json", "version": "3", "product_status": {"known_affected": 9}, "imported": 1793857678.0, "vulnerability_id": "CVE-2016-4418", "vulnerability_url": "/vuln/CVE-2016-4418"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:55+00:00", "cve": "CVE-2016-4419", "id": "CVE-2016-4419", "initial_release_date": "2016-02-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wireshark: SPICE dissector large loop (wnpa-sec-2016-16)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4419.json", "version": "3", "product_status": {"known_not_affected": 9}, "imported": 1793857675.0, "vulnerability_id": "CVE-2016-4419", "vulnerability_url": "/vuln/CVE-2016-4419"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:52+00:00", "cve": "CVE-2016-4417", "id": "CVE-2016-4417", "initial_release_date": "2016-02-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wireshark: GSM A-bis OML dissector crash (wnpa-sec-2016-14)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4417.json", "version": "3", "product_status": {"known_affected": 9}, "imported": 1793857672.0, "vulnerability_id": "CVE-2016-4417", "vulnerability_url": "/vuln/CVE-2016-4417"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:50+00:00", "cve": "CVE-2016-4416", "id": "CVE-2016-4416", "initial_release_date": "2016-02-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wireshark: IEEE 802.11 dissector crash (wnpa-sec-2016-13)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4416.json", "version": "3", "product_status": {"known_not_affected": 9}, "imported": 1793857670.0, "vulnerability_id": "CVE-2016-4416", "vulnerability_url": "/vuln/CVE-2016-4416"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:48+00:00", "cve": "CVE-2016-4415", "id": "CVE-2016-4415", "initial_release_date": "2016-02-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wireshark: Ixia IxVeriWave file parser crash (wnpa-sec-2016-12)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4415.json", "version": "3", "product_status": {"known_not_affected": 9}, "imported": 1793857668.0, "vulnerability_id": "CVE-2016-4415", "vulnerability_url": "/vuln/CVE-2016-4415"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:45+00:00", "cve": "CVE-2016-4356", "id": "CVE-2016-4356", "initial_release_date": "2016-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libksba: encoding of invalid utf-8 strings in DN decoder src/dn.c (append_quoted, append_atv)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4356.json", "version": "3", "product_status": {"known_affected": 6}, "imported": 1793857665.0, "vulnerability_id": "CVE-2016-4356", "vulnerability_url": "/vuln/CVE-2016-4356"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:43+00:00", "cve": "CVE-2016-4355", "id": "CVE-2016-4355", "initial_release_date": "2016-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libksba: integer overflow in the BER decoder src/ber-decoder.c (ber_decoder_s)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4355.json", "version": "3", "product_status": {"known_affected": 6}, "imported": 1793857663.0, "vulnerability_id": "CVE-2016-4355", "vulnerability_url": "/vuln/CVE-2016-4355"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:42+00:00", "cve": "CVE-2016-4354", "id": "CVE-2016-4354", "initial_release_date": "2016-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libksba: integer overflow in the BER decoder src/ber-decoder.c (ber_decoder_s)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4354.json", "version": "3", "product_status": {"known_affected": 6}, "imported": 1793857662.0, "vulnerability_id": "CVE-2016-4354", "vulnerability_url": "/vuln/CVE-2016-4354"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:40+00:00", "cve": "CVE-2016-4348", "id": "CVE-2016-4348", "initial_release_date": "2016-04-28T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "librsvg2: DoS parsing SVGs with circular definitions _rsvg_css_normalize_font_size() function", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4348.json", "version": "3", "product_status": {"known_affected": 8}, "imported": 1793857660.0, "vulnerability_id": "CVE-2016-4348", "vulnerability_url": "/vuln/CVE-2016-4348"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:37+00:00", "cve": "CVE-2016-4343", "id": "CVE-2016-4343", "initial_release_date": "2016-01-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "php: Uninitialized pointer in phar_make_dirstream()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4343.json", "version": "3", "product_status": {"fixed": 251, "known_affected": 109, "known_not_affected": 1}, "imported": 1793857657.0, "vulnerability_id": "CVE-2016-4343", "vulnerability_url": "/vuln/CVE-2016-4343"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:35+00:00", "cve": "CVE-2016-4342", "id": "CVE-2016-4342", "initial_release_date": "2016-01-12T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "php: use of uninitialized pointer in PharFileInfo::getContent", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4342.json", "version": "3", "product_status": {"fixed": 251, "known_affected": 109, "known_not_affected": 1}, "imported": 1793857655.0, "vulnerability_id": "CVE-2016-4342", "vulnerability_url": "/vuln/CVE-2016-4342"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:33+00:00", "cve": "CVE-2016-4324", "id": "CVE-2016-4324", "initial_release_date": "2016-06-28T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libreoffice: Dereference of invalid STL iterator on processing RTF file", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4324.json", "version": "3", "product_status": {"known_not_affected": 317}, "imported": 1793857653.0, "vulnerability_id": "CVE-2016-4324", "vulnerability_url": "/vuln/CVE-2016-4324"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:31+00:00", "cve": "CVE-2016-4323", "id": "CVE-2016-4323", "initial_release_date": "2016-06-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "pidgin: MXIT Splash Image Arbitrary File Overwrite Vulnerability", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4323.json", "version": "3", "product_status": {"known_affected": 22}, "imported": 1793857651.0, "vulnerability_id": "CVE-2016-4323", "vulnerability_url": "/vuln/CVE-2016-4323"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:31+00:00", "cve": "CVE-2016-4302", "id": "CVE-2016-4302", "initial_release_date": "2016-06-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libarchive: Heap buffer overflow in the Rar decompression functionality", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4302.json", "version": "3", "product_status": {"fixed": 70, "known_not_affected": 3}, "imported": 1793857651.0, "vulnerability_id": "CVE-2016-4302", "vulnerability_url": "/vuln/CVE-2016-4302"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:24+00:00", "cve": "CVE-2016-4300", "id": "CVE-2016-4300", "initial_release_date": "2016-06-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libarchive: Heap buffer overflow vulnerability in the 7zip read_SubStreamsInfo", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4300.json", "version": "3", "product_status": {"fixed": 70, "known_not_affected": 3}, "imported": 1793857644.0, "vulnerability_id": "CVE-2016-4300", "vulnerability_url": "/vuln/CVE-2016-4300"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:22+00:00", "cve": "CVE-2016-4216", "id": "CVE-2016-4216", "initial_release_date": "2016-07-12T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xmpcore: XXE resulting in information disclosure", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4216.json", "version": "3", "product_status": {"known_affected": 3}, "imported": 1793857642.0, "vulnerability_id": "CVE-2016-4216", "vulnerability_url": "/vuln/CVE-2016-4216"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:21+00:00", "cve": "CVE-2016-4085", "id": "CVE-2016-4085", "initial_release_date": "2016-04-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wireshark: NCP dissector crash (wnpa-sec-2016-28)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4085.json", "version": "3", "product_status": {"known_affected": 9}, "imported": 1793857641.0, "vulnerability_id": "CVE-2016-4085", "vulnerability_url": "/vuln/CVE-2016-4085"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:19+00:00", "cve": "CVE-2016-4084", "id": "CVE-2016-4084", "initial_release_date": "2016-04-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wireshark: MS-WSP dissector crash (wnpa-sec-2016-27)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4084.json", "version": "3", "product_status": {"known_affected": 9}, "imported": 1793857639.0, "vulnerability_id": "CVE-2016-4084", "vulnerability_url": "/vuln/CVE-2016-4084"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:17+00:00", "cve": "CVE-2016-4083", "id": "CVE-2016-4083", "initial_release_date": "2016-04-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wireshark: MS-WSP dissector crash (wnpa-sec-2016-27)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4083.json", "version": "3", "product_status": {"known_affected": 9}, "imported": 1793857637.0, "vulnerability_id": "CVE-2016-4083", "vulnerability_url": "/vuln/CVE-2016-4083"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:47:16+00:00", "cve": "CVE-2016-4082", "id": "CVE-2016-4082", "initial_release_date": "2016-04-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wireshark: GSM CBCH dissector crash (wnpa-sec-2016-26)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4082.json", "version": "3", "product_status": {"known_affected": 9}, "imported": 1793857636.0, "vulnerability_id": "CVE-2016-4082", "vulnerability_url": "/vuln/CVE-2016-4082"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:46:35+00:00", "cve": "CVE-2022-41725", "id": "CVE-2022-41725", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/http, mime/multipart: denial of service from excessive resource consumption", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-41725.json", "version": "3", "product_status": {"fixed": 2279, "known_affected": 90, "known_not_affected": 2348}, "imported": 1793857595.0, "vulnerability_id": "CVE-2022-41725", "vulnerability_url": "/vuln/CVE-2022-41725"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:46:32+00:00", "cve": "CVE-2022-41724", "id": "CVE-2022-41724", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: crypto/tls: large handshake records may cause panics", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-41724.json", "version": "3", "product_status": {"fixed": 1726, "known_affected": 88, "known_not_affected": 2714}, "imported": 1793857592.0, "vulnerability_id": "CVE-2022-41724", "vulnerability_url": "/vuln/CVE-2022-41724"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:46:32+00:00", "cve": "CVE-2022-41717", "id": "CVE-2022-41717", "initial_release_date": "2022-11-30T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-41717.json", "version": "3", "product_status": {"fixed": 2105, "known_affected": 138, "known_not_affected": 7595}, "imported": 1793857592.0, "vulnerability_id": "CVE-2022-41717", "vulnerability_url": "/vuln/CVE-2022-41717"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:55+00:00", "cve": "CVE-2016-4081", "id": "CVE-2016-4081", "initial_release_date": "2016-04-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wireshark: IAX2 infinite loop (wnpa-sec-2016-24)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4081.json", "version": "3", "product_status": {"known_affected": 9}, "imported": 1793857555.0, "vulnerability_id": "CVE-2016-4081", "vulnerability_url": "/vuln/CVE-2016-4081"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:53+00:00", "cve": "CVE-2016-4080", "id": "CVE-2016-4080", "initial_release_date": "2016-04-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wireshark: PKTC dissector crash (wnpa-sec-2016-23)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4080.json", "version": "3", "product_status": {"known_affected": 9}, "imported": 1793857553.0, "vulnerability_id": "CVE-2016-4080", "vulnerability_url": "/vuln/CVE-2016-4080"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:51+00:00", "cve": "CVE-2016-4079", "id": "CVE-2016-4079", "initial_release_date": "2016-04-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wireshark: PKTC dissector crash (wnpa-sec-2016-22)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4079.json", "version": "3", "product_status": {"known_affected": 9}, "imported": 1793857551.0, "vulnerability_id": "CVE-2016-4079", "vulnerability_url": "/vuln/CVE-2016-4079"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:50+00:00", "cve": "CVE-2016-4078", "id": "CVE-2016-4078", "initial_release_date": "2016-04-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wireshark: IEEE 802.11 dissector crash (wnpa-sec-2016-21)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4078.json", "version": "3", "product_status": {"known_affected": 9}, "imported": 1793857550.0, "vulnerability_id": "CVE-2016-4078", "vulnerability_url": "/vuln/CVE-2016-4078"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:48+00:00", "cve": "CVE-2016-4077", "id": "CVE-2016-4077", "initial_release_date": "2016-04-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wireshark: TShark reassembly crash (wnpa-sec-2016-20)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4077.json", "version": "3", "product_status": {"known_affected": 9}, "imported": 1793857548.0, "vulnerability_id": "CVE-2016-4077", "vulnerability_url": "/vuln/CVE-2016-4077"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:46+00:00", "cve": "CVE-2016-4076", "id": "CVE-2016-4076", "initial_release_date": "2016-04-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wireshark: NCP dissector crash (wnpa-sec-2016-19)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4076.json", "version": "3", "product_status": {"known_affected": 9}, "imported": 1793857546.0, "vulnerability_id": "CVE-2016-4076", "vulnerability_url": "/vuln/CVE-2016-4076"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:44+00:00", "cve": "CVE-2016-4073", "id": "CVE-2016-4073", "initial_release_date": "2016-03-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "php: mb_strcut() Negative size parameter in memcpy", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4073.json", "version": "3", "product_status": {"fixed": 251, "known_affected": 110}, "imported": 1793857544.0, "vulnerability_id": "CVE-2016-4073", "vulnerability_url": "/vuln/CVE-2016-4073"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:42+00:00", "cve": "CVE-2016-4072", "id": "CVE-2016-4072", "initial_release_date": "2016-03-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "php: Invalid memory write in phar on filename containing \\0 inside name", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4072.json", "version": "3", "product_status": {"fixed": 251, "known_affected": 109, "known_not_affected": 1}, "imported": 1793857542.0, "vulnerability_id": "CVE-2016-4072", "vulnerability_url": "/vuln/CVE-2016-4072"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:41+00:00", "cve": "CVE-2016-4071", "id": "CVE-2016-4071", "initial_release_date": "2016-03-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "php: Format string vulnerability in php_snmp_error()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4071.json", "version": "3", "product_status": {"fixed": 251, "known_affected": 80, "known_not_affected": 30}, "imported": 1793857541.0, "vulnerability_id": "CVE-2016-4071", "vulnerability_url": "/vuln/CVE-2016-4071"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:37+00:00", "cve": "CVE-2016-4070", "id": "CVE-2016-4070", "initial_release_date": "2016-03-11T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "php: Integer overflow in php_raw_url_encode", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4070.json", "version": "3", "product_status": {"fixed": 251, "known_affected": 110}, "imported": 1793857537.0, "vulnerability_id": "CVE-2016-4070", "vulnerability_url": "/vuln/CVE-2016-4070"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:34+00:00", "cve": "CVE-2016-4055", "id": "CVE-2016-4055", "initial_release_date": "2016-01-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "moment.js: regular expression denial of service", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4055.json", "version": "3", "product_status": {"known_affected": 1}, "imported": 1793857534.0, "vulnerability_id": "CVE-2016-4055", "vulnerability_url": "/vuln/CVE-2016-4055"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:33+00:00", "cve": "CVE-2016-4054", "id": "CVE-2016-4054", "initial_release_date": "2016-04-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "squid: multiple issues in ESI processing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4054.json", "version": "3", "product_status": {"fixed": 50, "known_not_affected": 1}, "imported": 1793857533.0, "vulnerability_id": "CVE-2016-4054", "vulnerability_url": "/vuln/CVE-2016-4054"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:30+00:00", "cve": "CVE-2016-4053", "id": "CVE-2016-4053", "initial_release_date": "2016-04-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "squid: multiple issues in ESI processing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4053.json", "version": "3", "product_status": {"fixed": 50, "known_not_affected": 1}, "imported": 1793857530.0, "vulnerability_id": "CVE-2016-4053", "vulnerability_url": "/vuln/CVE-2016-4053"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:24+00:00", "cve": "CVE-2016-4052", "id": "CVE-2016-4052", "initial_release_date": "2016-04-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "squid: multiple issues in ESI processing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4052.json", "version": "3", "product_status": {"fixed": 50, "known_not_affected": 1}, "imported": 1793857524.0, "vulnerability_id": "CVE-2016-4052", "vulnerability_url": "/vuln/CVE-2016-4052"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:22+00:00", "cve": "CVE-2016-4051", "id": "CVE-2016-4051", "initial_release_date": "2016-04-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "squid: buffer overflow in cachemgr.cgi", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4051.json", "version": "3", "product_status": {"fixed": 50, "known_affected": 1}, "imported": 1793857522.0, "vulnerability_id": "CVE-2016-4051", "vulnerability_url": "/vuln/CVE-2016-4051"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:19+00:00", "cve": "CVE-2016-4049", "id": "CVE-2016-4049", "initial_release_date": "2016-04-27T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "quagga: denial of service vulnerability in BGP routing daemon", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4049.json", "version": "3", "product_status": {"fixed": 36, "known_affected": 5}, "imported": 1793857519.0, "vulnerability_id": "CVE-2016-4049", "vulnerability_url": "/vuln/CVE-2016-4049"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:16+00:00", "cve": "CVE-2016-4009", "id": "CVE-2016-4009", "initial_release_date": "2016-04-14T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "python-pillow: integer overflow in the ImagingResampleHorizontal function", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4009.json", "version": "3", "product_status": {"known_not_affected": 13}, "imported": 1793857516.0, "vulnerability_id": "CVE-2016-4009", "vulnerability_url": "/vuln/CVE-2016-4009"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:14+00:00", "cve": "CVE-2016-4008", "id": "CVE-2016-4008", "initial_release_date": "2016-04-11T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libtasn1: infinite loop while parsing DER certificates", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4008.json", "version": "3", "product_status": {"known_affected": 12}, "imported": 1793857514.0, "vulnerability_id": "CVE-2016-4008", "vulnerability_url": "/vuln/CVE-2016-4008"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:13+00:00", "cve": "CVE-2016-4006", "id": "CVE-2016-4006", "initial_release_date": "2016-04-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wireshark: Wireshark and TShark crash (wnpa-sec-2016-25)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4006.json", "version": "3", "product_status": {"known_affected": 9}, "imported": 1793857513.0, "vulnerability_id": "CVE-2016-4006", "vulnerability_url": "/vuln/CVE-2016-4006"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:09+00:00", "cve": "CVE-2016-4001", "id": "CVE-2016-4001", "initial_release_date": "2016-04-07T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Qemu: net: buffer overflow in stellaris_enet emulator", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4001.json", "version": "3", "product_status": {"known_affected": 16, "known_not_affected": 20}, "imported": 1793857509.0, "vulnerability_id": "CVE-2016-4001", "vulnerability_url": "/vuln/CVE-2016-4001"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:09+00:00", "cve": "CVE-2016-4002", "id": "CVE-2016-4002", "initial_release_date": "2016-04-07T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Qemu: net: buffer overflow in MIPSnet emulator", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4002.json", "version": "3", "product_status": {"known_affected": 16, "known_not_affected": 20}, "imported": 1793857509.0, "vulnerability_id": "CVE-2016-4002", "vulnerability_url": "/vuln/CVE-2016-4002"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:05+00:00", "cve": "CVE-2016-3991", "id": "CVE-2016-3991", "initial_release_date": "2016-04-12T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libtiff: out-of-bounds write in loadImage() function", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3991.json", "version": "3", "product_status": {"fixed": 135, "known_not_affected": 3}, "imported": 1793857505.0, "vulnerability_id": "CVE-2016-3991", "vulnerability_url": "/vuln/CVE-2016-3991"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:04+00:00", "cve": "CVE-2016-3982", "id": "CVE-2016-3982", "initial_release_date": "2016-04-05T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "optipng: heap buffer overflow in the bmp_rle4_fread function", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3982.json", "version": "3", "product_status": {"known_affected": 1}, "imported": 1793857504.0, "vulnerability_id": "CVE-2016-3982", "vulnerability_url": "/vuln/CVE-2016-3982"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:45:00+00:00", "cve": "CVE-2016-3981", "id": "CVE-2016-3981", "initial_release_date": "2016-04-05T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "optipng: heap buffer overflow in the bmp_read_rows function", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3981.json", "version": "3", "product_status": {"known_affected": 1}, "imported": 1793857500.0, "vulnerability_id": "CVE-2016-3981", "vulnerability_url": "/vuln/CVE-2016-3981"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:59+00:00", "cve": "CVE-2016-3961", "id": "CVE-2016-3961", "initial_release_date": "2016-04-14T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xen: hugetlbfs use may crash PV Linux guests (XSA-174)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3961.json", "version": "3", "product_status": {"known_affected": 1}, "imported": 1793857499.0, "vulnerability_id": "CVE-2016-3961", "vulnerability_url": "/vuln/CVE-2016-3961"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:55+00:00", "cve": "CVE-2016-3960", "id": "CVE-2016-3960", "initial_release_date": "2016-04-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xen: x86 shadow pagetables: address width overflow (XSA-173)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3960.json", "version": "3", "product_status": {"known_affected": 1}, "imported": 1793857495.0, "vulnerability_id": "CVE-2016-3960", "vulnerability_url": "/vuln/CVE-2016-3960"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:54+00:00", "cve": "CVE-2016-3959", "id": "CVE-2016-3959", "initial_release_date": "2016-04-05T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: infinite loop in several big integer routines", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3959.json", "version": "3", "product_status": {"fixed": 7, "known_affected": 1}, "imported": 1793857494.0, "vulnerability_id": "CVE-2016-3959", "vulnerability_url": "/vuln/CVE-2016-3959"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:51+00:00", "cve": "CVE-2016-3948", "id": "CVE-2016-3948", "initial_release_date": "2016-04-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "squid: denial of service issue in HTTP response processing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3948.json", "version": "3", "product_status": {"fixed": 32, "known_affected": 4, "known_not_affected": 1}, "imported": 1793857491.0, "vulnerability_id": "CVE-2016-3948", "vulnerability_url": "/vuln/CVE-2016-3948"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:50+00:00", "cve": "CVE-2016-3945", "id": "CVE-2016-3945", "initial_release_date": "2016-04-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libtiff: out-of-bounds write in the tiff2rgba tool", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3945.json", "version": "3", "product_status": {"fixed": 135, "under_investigation": 3}, "imported": 1793857490.0, "vulnerability_id": "CVE-2016-3945", "vulnerability_url": "/vuln/CVE-2016-3945"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:49+00:00", "cve": "CVE-2016-3739", "id": "CVE-2016-3739", "initial_release_date": "2016-05-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "curl: TLS certificate name check bypass with mbedTLS and PolarSSL", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3739.json", "version": "3", "product_status": {"known_not_affected": 13}, "imported": 1793857489.0, "vulnerability_id": "CVE-2016-3739", "vulnerability_url": "/vuln/CVE-2016-3739"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:46+00:00", "cve": "CVE-2016-3716", "id": "CVE-2016-3716", "initial_release_date": "2016-05-03T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "ImageMagick: File moving", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3716.json", "version": "3", "product_status": {"fixed": 189, "known_affected": 2}, "imported": 1793857486.0, "vulnerability_id": "CVE-2016-3716", "vulnerability_url": "/vuln/CVE-2016-3716"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:43+00:00", "cve": "CVE-2016-3713", "id": "CVE-2016-3713", "initial_release_date": "2016-05-16T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: kvm: out-of-bounds access in set_var_mtrr_msr", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3713.json", "version": "3", "product_status": {"known_not_affected": 55}, "imported": 1793857483.0, "vulnerability_id": "CVE-2016-3713", "vulnerability_url": "/vuln/CVE-2016-3713"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:41+00:00", "cve": "CVE-2016-3712", "id": "CVE-2016-3712", "initial_release_date": "2016-05-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "qemu-kvm: Out-of-bounds read when creating weird vga screen surface", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3712.json", "version": "3", "product_status": {"fixed": 60, "known_affected": 22}, "imported": 1793857481.0, "vulnerability_id": "CVE-2016-3712", "vulnerability_url": "/vuln/CVE-2016-3712"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:38+00:00", "cve": "CVE-2016-3709", "id": "CVE-2016-3709", "initial_release_date": "2016-08-11T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libxml2: Incorrect server side include parsing can lead to XSS", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3709.json", "version": "3", "product_status": {"fixed": 90, "known_affected": 10, "known_not_affected": 5}, "imported": 1793857478.0, "vulnerability_id": "CVE-2016-3709", "vulnerability_url": "/vuln/CVE-2016-3709"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:37+00:00", "cve": "CVE-2016-3707", "id": "CVE-2016-3707", "initial_release_date": "2016-05-17T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel-rt: Sending SysRq command via ICMP echo request", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3707.json", "version": "3", "product_status": {"fixed": 46, "known_not_affected": 33}, "imported": 1793857477.0, "vulnerability_id": "CVE-2016-3707", "vulnerability_url": "/vuln/CVE-2016-3707"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:34+00:00", "cve": "CVE-2016-3705", "id": "CVE-2016-3705", "initial_release_date": "2016-05-03T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libxml2: stack overflow before detecting invalid XML file", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3705.json", "version": "3", "product_status": {"fixed": 145, "known_affected": 3}, "imported": 1793857474.0, "vulnerability_id": "CVE-2016-3705", "vulnerability_url": "/vuln/CVE-2016-3705"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:33+00:00", "cve": "CVE-2016-3674", "id": "CVE-2016-3674", "initial_release_date": "2016-03-15T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "XStream: enabled processing of external entities", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3674.json", "version": "3", "product_status": {"fixed": 2, "known_affected": 17}, "imported": 1793857473.0, "vulnerability_id": "CVE-2016-3674", "vulnerability_url": "/vuln/CVE-2016-3674"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:30+00:00", "cve": "CVE-2016-3632", "id": "CVE-2016-3632", "initial_release_date": "2016-04-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libtiff: out-of-bounds write in _TIFFVGetField function", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3632.json", "version": "3", "product_status": {"fixed": 135, "known_affected": 1, "under_investigation": 2}, "imported": 1793857470.0, "vulnerability_id": "CVE-2016-3632", "vulnerability_url": "/vuln/CVE-2016-3632"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:28+00:00", "cve": "CVE-2016-3627", "id": "CVE-2016-3627", "initial_release_date": "2016-03-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libxml2: stack exhaustion while parsing xml files in recovery mode", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3627.json", "version": "3", "product_status": {"fixed": 145, "known_affected": 3}, "imported": 1793857468.0, "vulnerability_id": "CVE-2016-3627", "vulnerability_url": "/vuln/CVE-2016-3627"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:26+00:00", "cve": "CVE-2016-3616", "id": "CVE-2016-3616", "initial_release_date": "2016-03-30T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libjpeg: null pointer dereference in cjpeg", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3616.json", "version": "3", "product_status": {"fixed": 102, "known_affected": 8}, "imported": 1793857466.0, "vulnerability_id": "CVE-2016-3616", "vulnerability_url": "/vuln/CVE-2016-3616"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:24+00:00", "cve": "CVE-2016-3615", "id": "CVE-2016-3615", "initial_release_date": "2016-07-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: unspecified vulnerability in subcomponent: Server: DML (CPU July 2016)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3615.json", "version": "3", "product_status": {"fixed": 502, "known_affected": 9, "under_investigation": 9}, "imported": 1793857464.0, "vulnerability_id": "CVE-2016-3615", "vulnerability_url": "/vuln/CVE-2016-3615"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:22+00:00", "cve": "CVE-2016-3614", "id": "CVE-2016-3614", "initial_release_date": "2016-07-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3614.json", "version": "3", "product_status": {"fixed": 80, "known_not_affected": 62}, "imported": 1793857462.0, "vulnerability_id": "CVE-2016-3614", "vulnerability_url": "/vuln/CVE-2016-3614"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:22+00:00", "cve": "CVE-2016-3588", "id": "CVE-2016-3588", "initial_release_date": "2016-07-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: unspecified vulnerability in subcomponent: Server: InnoDB  (CPU July 2016)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3588.json", "version": "3", "product_status": {"known_not_affected": 71}, "imported": 1793857462.0, "vulnerability_id": "CVE-2016-3588", "vulnerability_url": "/vuln/CVE-2016-3588"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:19+00:00", "cve": "CVE-2016-3518", "id": "CVE-2016-3518", "initial_release_date": "2016-07-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3518.json", "version": "3", "product_status": {"known_not_affected": 71}, "imported": 1793857459.0, "vulnerability_id": "CVE-2016-3518", "vulnerability_url": "/vuln/CVE-2016-3518"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:18+00:00", "cve": "CVE-2016-3521", "id": "CVE-2016-3521", "initial_release_date": "2016-07-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: unspecified vulnerability in subcomponent: Server: Types (CPU July 2016)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3521.json", "version": "3", "product_status": {"fixed": 502, "known_affected": 9, "under_investigation": 9}, "imported": 1793857458.0, "vulnerability_id": "CVE-2016-3521", "vulnerability_url": "/vuln/CVE-2016-3521"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:12+00:00", "cve": "CVE-2016-3501", "id": "CVE-2016-3501", "initial_release_date": "2016-07-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3501.json", "version": "3", "product_status": {"fixed": 80, "known_not_affected": 62}, "imported": 1793857452.0, "vulnerability_id": "CVE-2016-3501", "vulnerability_url": "/vuln/CVE-2016-3501"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:10+00:00", "cve": "CVE-2016-3495", "id": "CVE-2016-3495", "initial_release_date": "2016-10-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3495.json", "version": "3", "product_status": {"known_not_affected": 88}, "imported": 1793857450.0, "vulnerability_id": "CVE-2016-3495", "vulnerability_url": "/vuln/CVE-2016-3495"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:09+00:00", "cve": "CVE-2016-3492", "id": "CVE-2016-3492", "initial_release_date": "2016-10-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU October 2016)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3492.json", "version": "3", "product_status": {"fixed": 479, "known_affected": 18, "known_not_affected": 8, "under_investigation": 9}, "imported": 1793857449.0, "vulnerability_id": "CVE-2016-3492", "vulnerability_url": "/vuln/CVE-2016-3492"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:06+00:00", "cve": "CVE-2016-3471", "id": "CVE-2016-3471", "initial_release_date": "2016-07-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: unspecified vulnerability in subcomponent: Server: Option (CPU July 2016)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3471.json", "version": "3", "product_status": {"fixed": 406, "known_affected": 9, "known_not_affected": 11, "under_investigation": 9}, "imported": 1793857446.0, "vulnerability_id": "CVE-2016-3471", "vulnerability_url": "/vuln/CVE-2016-3471"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:06+00:00", "cve": "CVE-2016-3486", "id": "CVE-2016-3486", "initial_release_date": "2016-07-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU July 2016)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3486.json", "version": "3", "product_status": {"fixed": 80, "known_not_affected": 62}, "imported": 1793857446.0, "vulnerability_id": "CVE-2016-3486", "vulnerability_url": "/vuln/CVE-2016-3486"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:03+00:00", "cve": "CVE-2016-3459", "id": "CVE-2016-3459", "initial_release_date": "2016-07-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU July 2016)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3459.json", "version": "3", "product_status": {"fixed": 168, "known_not_affected": 52}, "imported": 1793857443.0, "vulnerability_id": "CVE-2016-3459", "vulnerability_url": "/vuln/CVE-2016-3459"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:44:01+00:00", "cve": "CVE-2016-3440", "id": "CVE-2016-3440", "initial_release_date": "2016-07-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3440.json", "version": "3", "product_status": {"known_not_affected": 71}, "imported": 1793857441.0, "vulnerability_id": "CVE-2016-3440", "vulnerability_url": "/vuln/CVE-2016-3440"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:43:59+00:00", "cve": "CVE-2016-3424", "id": "CVE-2016-3424", "initial_release_date": "2016-07-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3424.json", "version": "3", "product_status": {"known_not_affected": 71}, "imported": 1793857439.0, "vulnerability_id": "CVE-2016-3424", "vulnerability_url": "/vuln/CVE-2016-3424"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:43:57+00:00", "cve": "CVE-2016-3190", "id": "CVE-2016-3190", "initial_release_date": "2016-03-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "cairo: out of bounds read in fill_xrgb32_lerp_opaque_spans", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3190.json", "version": "3", "product_status": {"fixed": 1263, "known_not_affected": 3}, "imported": 1793857437.0, "vulnerability_id": "CVE-2016-3190", "vulnerability_url": "/vuln/CVE-2016-3190"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:43:54+00:00", "cve": "CVE-2016-3186", "id": "CVE-2016-3186", "initial_release_date": "2016-03-30T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libtiff: buffer overflow in gif2tiff", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3186.json", "version": "3", "product_status": {"fixed": 76, "known_affected": 7}, "imported": 1793857434.0, "vulnerability_id": "CVE-2016-3186", "vulnerability_url": "/vuln/CVE-2016-3186"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:43:53+00:00", "cve": "CVE-2016-3185", "id": "CVE-2016-3185", "initial_release_date": "2016-02-16T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "php: Type confusion vulnerability in make_http_soap_request()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3185.json", "version": "3", "product_status": {"known_affected": 140}, "imported": 1793857433.0, "vulnerability_id": "CVE-2016-3185", "vulnerability_url": "/vuln/CVE-2016-3185"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T05:43:51+00:00", "cve": "CVE-2016-3183", "id": "CVE-2016-3183", "initial_release_date": "2016-03-14T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openjpeg: Out-of-bounds read in sycc422_to_rgb function", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-3183.json", "version": "3", "product_status": {"known_not_affected": 8}, "imported": 1793857431.0, "vulnerability_id": "CVE-2016-3183", "vulnerability_url": "/vuln/CVE-2016-3183"}]}