The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2771 advisory.

  - hw: Special Register Buffer Data Sampling (SRBDS)     (CVE-2020-0543)

  - hw: Vector Register Data Sampling (CVE-2020-0548)

  - hw: L1D Cache Eviction Sampling (CVE-2020-0549)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2870 advisory.

  - kubernetes: YAML parsing vulnerable to Billion Laughs     attack, allowing for remote denial of service     (CVE-2019-11253)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2863 advisory.

  - kubernetes: YAML parsing vulnerable to Billion Laughs     attack, allowing for remote denial of service     (CVE-2019-11253)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2864 advisory.

  - envoy: Resource exhaustion when proxying HTTP/2 requests     or responses with small data frames (CVE-2020-12603)

  - envoy: Resource exhaustion via HTTP/2 client requests     with large payloads and improper stream windows     (CVE-2020-12604)

  - envoy: Resource exhaustion when processing HTTP/1.1     headers with long field names (CVE-2020-12605)

  - envoy: Resource exhaustion when accepting too many     connections (CVE-2020-8663)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2861 advisory.

  - kubernetes: YAML parsing vulnerable to Billion Laughs     attack, allowing for remote denial of service     (CVE-2019-11253)

  - grafana: XSS annotation popup vulnerability     (CVE-2020-12052)

  - grafana: XSS via column.title or cellLinkTooltip     (CVE-2020-12245)

  - grafana: SSRF incorrect access control vulnerability     allows unauthenticated users to make grafana send HTTP     requests to any URL (CVE-2020-13379)

  - grafana: XSS via the OpenTSDB datasource     (CVE-2020-13430)

  - npm-serialize-javascript: allows remote attackers to     inject arbitrary code via the function deleteFunctions     within index.js (CVE-2020-7660)

  - npmjs-websocket-extensions: ReDoS vulnerability in Sec-     WebSocket-Extensions parser (CVE-2020-7662)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2844 advisory.

  - QEMU: Slirp: potential OOB access due to unsafe     snprintf() usages (CVE-2020-8608)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2848 advisory.

  - nghttp2: overly large SETTINGS frames can lead to DoS     (CVE-2020-11080)

  - nodejs-minimist: prototype pollution allows adding or     modifying properties of Object.prototype using a     constructor or __proto__ payload (CVE-2020-7598)

  - nodejs: memory corruption in napi_get_value_string_*     functions (CVE-2020-8174)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2851 advisory.

  - kernel: usb: missing size check in the
    __usb_get_extra_descriptor() leading to DoS     (CVE-2018-20169)

  - kernel: denial of service via ioctl call in network tun     handling (CVE-2018-7191)

  - kernel: Count overflow in FUSE request leading to use-     after-free issues. (CVE-2019-11487)

  - kernel: use-after-free in arch/x86/lib/insn-eval.c     (CVE-2019-13233)

  - Kernel: KVM: OOB memory access via mmio ring buffer     (CVE-2019-14821)

  - kernel: memory leak in register_queue_kobjects() in     net/core/net-sysfs.c leads to denial of service     (CVE-2019-15916)

  - kernel: powerpc: incomplete Spectre-RSB mitigation leads     to information exposure (CVE-2019-18660)

  - kernel: perf_event_open() and execve() race in setuid     programs allows a data leak (CVE-2019-3901)

  - Kernel: vfio: access to disabled MMIO space of some     devices may lead to DoS scenario (CVE-2020-12888)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2850 advisory.

  - nghttp2: overly large SETTINGS frames can lead to DoS     (CVE-2020-11080)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2847 advisory.

  - nghttp2: overly large SETTINGS frames can lead to DoS     (CVE-2020-11080)

  - nodejs-minimist: prototype pollution allows adding or     modifying properties of Object.prototype using a     constructor or __proto__ payload (CVE-2020-7598)

  - nodejs: TLS session reuse can lead to hostname     verification bypass (CVE-2020-8172)

  - nodejs: memory corruption in napi_get_value_string_*     functions (CVE-2020-8174)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2831 advisory.

  - Kernel: vfio: access to disabled MMIO space of some     devices may lead to DoS scenario (CVE-2020-12888)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2839 advisory.

  - ruby: Tainted flags are not propagated in Array#pack and     String#unpack with some directives (CVE-2018-16396)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2840 advisory.

  - tomcat: Apache Tomcat AJP File Read/Inclusion     Vulnerability (CVE-2020-1938)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2842 advisory.

  - hw: Special Register Buffer Data Sampling (SRBDS)     (CVE-2020-0543)

  - hw: Vector Register Data Sampling (CVE-2020-0548)

  - hw: L1D Cache Eviction Sampling (CVE-2020-0549)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2846 advisory.

  - gettext: double free in default_add_message in read-     catalog.c (CVE-2018-18751)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2832 advisory.

  - kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv     function in drivers/net/wireless/marvell/mwifiex/scan.c     (CVE-2020-12653)

  - kernel: heap-based buffer overflow in     mwifiex_ret_wmm_get_status function in     drivers/net/wireless/marvell/mwifiex/wmm.c     (CVE-2020-12654)

  - Kernel: vfio: access to disabled MMIO space of some     devices may lead to DoS scenario (CVE-2020-12888)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2849 advisory.

  - nghttp2: overly large SETTINGS frames can lead to DoS     (CVE-2020-11080)

  - nodejs-minimist: prototype pollution allows adding or     modifying properties of Object.prototype using a     constructor or __proto__ payload (CVE-2020-7598)

  - nodejs: memory corruption in napi_get_value_string_*     functions (CVE-2020-8174)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2835 advisory.

  - php: underflow in env_path_info in fpm_main.c     (CVE-2019-11043)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2838 advisory.

  - file: out-of-bounds read via a crafted ELF file     (CVE-2018-10360)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2833 advisory.

  - kdelibs: malicious desktop files and configuration files     lead to code execution with minimal user interaction     (CVE-2019-14744)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2823 advisory.

  - nghttp2: overly large SETTINGS frames can lead to DoS     (CVE-2020-11080)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2824 advisory.

  - Mozilla: Information disclosure due to manipulated URL     object (CVE-2020-12418)

  - Mozilla: Use-after-free in nsGlobalWindowInner     (CVE-2020-12419)

  - Mozilla: Use-After-Free when trying to connect to a STUN     server (CVE-2020-12420)

  - Mozilla: Add-On updates did not respect the same     certificate trust rules as software updates     (CVE-2020-12421)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2827 advisory.

  - Mozilla: Memory corruption due to missing sign-extension     for ValueTags on ARM64 (CVE-2020-12417)

  - Mozilla: Information disclosure due to manipulated URL     object (CVE-2020-12418)

  - Mozilla: Use-after-free in nsGlobalWindowInner     (CVE-2020-12419)

  - Mozilla: Use-After-Free when trying to connect to a STUN     server (CVE-2020-12420)

  - Mozilla: Add-On updates did not respect the same     certificate trust rules as software updates     (CVE-2020-12421)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2828 advisory.

  - Mozilla: Memory corruption due to missing sign-extension     for ValueTags on ARM64 (CVE-2020-12417)

  - Mozilla: Information disclosure due to manipulated URL     object (CVE-2020-12418)

  - Mozilla: Use-after-free in nsGlobalWindowInner     (CVE-2020-12419)

  - Mozilla: Use-After-Free when trying to connect to a STUN     server (CVE-2020-12420)

  - Mozilla: Add-On updates did not respect the same     certificate trust rules as software updates     (CVE-2020-12421)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2826 advisory.

  - Mozilla: Memory corruption due to missing sign-extension     for ValueTags on ARM64 (CVE-2020-12417)

  - Mozilla: Information disclosure due to manipulated URL     object (CVE-2020-12418)

  - Mozilla: Use-after-free in nsGlobalWindowInner     (CVE-2020-12419)

  - Mozilla: Use-After-Free when trying to connect to a STUN     server (CVE-2020-12420)

  - Mozilla: Add-On updates did not respect the same     certificate trust rules as software updates     (CVE-2020-12421)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2825 advisory.

  - Mozilla: Memory corruption due to missing sign-extension     for ValueTags on ARM64 (CVE-2020-12417)

  - Mozilla: Information disclosure due to manipulated URL     object (CVE-2020-12418)

  - Mozilla: Use-after-free in nsGlobalWindowInner     (CVE-2020-12419)

  - Mozilla: Use-After-Free when trying to connect to a STUN     server (CVE-2020-12420)

  - Mozilla: Add-On updates did not respect the same     certificate trust rules as software updates     (CVE-2020-12421)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2816 advisory.

  - keycloak: Lack of checks in ObjectInputStream leading to     Remote Code Execution (CVE-2020-1714)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 / 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2814 advisory.

  - keycloak: Lack of checks in ObjectInputStream leading to     Remote Code Execution (CVE-2020-1714)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0889 advisory.

  - QEMU: slirp: heap buffer overflow during packet     reassembly (CVE-2019-14378)

  - QEMU: Slirp: use-after-free during packet reassembly     (CVE-2019-15890)

  - QEMU: slirp: OOB buffer access while emulating tcp     protocols in tcp_emu() (CVE-2020-7039)

  - QEMU: Slirp: potential OOB access due to unsafe     snprintf() usages (CVE-2020-8608)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2776 advisory.

  - cri-o: infra container reparented to systemd following     OOM Killer killing it's conmon (CVE-2019-14891)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2592 advisory.

  - containernetworking/plugins: IPv6 router advertisements     allow for MitM attacks on IPv4 clusters (CVE-2020-10749)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2796 advisory.

  - kubernetes: YAML parsing vulnerable to Billion Laughs     attack, allowing for remote denial of service     (CVE-2019-11253)

  - npm-serialize-javascript: XSS via unsafe characters in     serialized regular expressions (CVE-2019-16769)

  - grafana: XSS annotation popup vulnerability     (CVE-2020-12052)

  - grafana: XSS via column.title or cellLinkTooltip     (CVE-2020-12245)

  - grafana: SSRF incorrect access control vulnerability     allows unauthenticated users to make grafana send HTTP     requests to any URL (CVE-2020-13379)

  - grafana: XSS via the OpenTSDB datasource     (CVE-2020-13430)

  - npm-serialize-javascript: allows remote attackers to     inject arbitrary code via the function deleteFunctions     within index.js (CVE-2020-7660)

  - npmjs-websocket-extensions: ReDoS vulnerability in Sec-     WebSocket-Extensions parser (CVE-2020-7662)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2798 advisory.

  - envoy: Resource exhaustion when proxying HTTP/2 requests     or responses with small data frames (CVE-2020-12603)

  - envoy: Resource exhaustion via HTTP/2 client requests     with large payloads and improper stream windows     (CVE-2020-12604)

  - envoy: Resource exhaustion when processing HTTP/1.1     headers with long field names (CVE-2020-12605)

  - envoy: Resource exhaustion when accepting too many     connections (CVE-2020-8663)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2593 advisory.

  - python-psutil: double free because of refcount     mishandling (CVE-2019-18874)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2795 advisory.

  - kubernetes: YAML parsing vulnerable to Billion Laughs     attack, allowing for remote denial of service     (CVE-2019-11253)

  - openshift-service-mesh/istio-rhel8-operator: control     plane can deploy gateway image to any namespace     (CVE-2020-14306)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2799 advisory.

  - kubernetes: YAML parsing vulnerable to Billion Laughs     attack, allowing for remote denial of service     (CVE-2019-11253)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2594 advisory.

  - kubernetes: Server side request forgery (SSRF) in kube-     controller-manager allows users to leak secret     information (CVE-2020-8555)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2779 advisory.

  - JBoss EAP: Vault system property security attribute     value is revealed on CLI 'reload' command     (CVE-2019-14885)

  - tomcat: Apache Tomcat AJP File Read/Inclusion     Vulnerability (CVE-2020-1938)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2777 advisory.

  - kernel: usb: missing size check in the
    __usb_get_extra_descriptor() leading to DoS     (CVE-2018-20169)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2780 advisory.

  - JBoss EAP: Vault system property security attribute     value is revealed on CLI 'reload' command     (CVE-2019-14885)

  - tomcat: Apache Tomcat AJP File Read/Inclusion     Vulnerability (CVE-2020-1938)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2781 advisory.

  - JBoss EAP: Vault system property security attribute     value is revealed on CLI 'reload' command     (CVE-2019-14885)

  - tomcat: Apache Tomcat AJP File Read/Inclusion     Vulnerability (CVE-2020-1938)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2773 advisory.

  - QEMU: Slirp: potential OOB access due to unsafe     snprintf() usages (CVE-2020-8608)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2768 advisory.

  - file: out-of-bounds read via a crafted ELF file     (CVE-2018-10360)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2769 advisory.

  - ruby: Tainted flags are not propagated in Array#pack and     String#unpack with some directives (CVE-2018-16396)

  - rubygems: Escape sequence injection vulnerability in     verbose (CVE-2019-8321)

  - rubygems: Escape sequence injection vulnerability in gem     owner (CVE-2019-8322)

  - rubygems: Escape sequence injection vulnerability in API     response handling (CVE-2019-8323)

  - rubygems: Installing a malicious gem may lead to     arbitrary code execution (CVE-2019-8324)

  - rubygems: Escape sequence injection vulnerability in     errors (CVE-2019-8325)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2755 advisory.

  - nghttp2: overly large SETTINGS frames can lead to DoS     (CVE-2020-11080)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2680 advisory.

  - hw: Special Register Buffer Data Sampling (SRBDS)     (CVE-2020-0543)

  - hw: Vector Register Data Sampling (CVE-2020-0548)

  - hw: L1D Cache Eviction Sampling (CVE-2020-0549)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2683 advisory.

  - dpdk: librte_vhost Interger overflow in     vhost_user_set_log_base() (CVE-2020-10722)

  - dpdk: librte_vhost Integer truncation in     vhost_user_check_and_alloc_queue_pair() (CVE-2020-10723)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2770 advisory.

  - kernel: usb: missing size check in the
    __usb_get_extra_descriptor() leading to DoS     (CVE-2018-20169)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2774 advisory.

  - QEMU: vnc: memory leakage upon disconnect     (CVE-2019-20382)

  - QEMU: Slirp: potential OOB access due to unsafe     snprintf() usages (CVE-2020-8608)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2737 advisory.

  - jenkins-script-security-plugin: sandbox protection     bypass leads to execute arbitrary code in sandboxed     scripts (CVE-2019-16538)

  - jenkins-pipeline-groovy-plugin: sandbox protection     bypass through default parameter expressions in CPS-     transformed methods (CVE-2020-2109)

  - jenkins-script-security-plugin: sandbox protection     bypass during script compilation phase by applying AST     transforming annotations (CVE-2020-2110)

  - jenkins-subversion-plugin: XSS in project repository     base url (CVE-2020-2111)

  - jenkins-script-security-plugin: sandbox protection     bypass via crafted constructor calls and crafted     constructor bodies (CVE-2020-2134)

  - jenkins-script-security-plugin: sandbox protection     bypass leads to arbitrary code execution (CVE-2020-2135)

  - jenkins-git-plugin: stored cross-site scripting     (CVE-2020-2136)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
138217	RHEL 7 : microcode_ctl (RHSA-2020:2771)	Low
138187	RHEL 8 : Red Hat OpenShift Service Mesh 1.0 servicemesh-cni (RHSA-2020:2870)	Medium
138186	RHEL 8 : Red Hat OpenShift Service Mesh 1.0 servicemesh-prometheus (RHSA-2020:2863)	Medium
138185	RHEL 8 : Red Hat OpenShift Service Mesh 1.0 servicemesh-proxy (RHSA-2020:2864)	High
138178	RHEL 8 : Red Hat OpenShift Service Mesh 1.0 servicemesh-grafana (RHSA-2020:2861)	Medium
138173	RHEL 7 : qemu-kvm (RHSA-2020:2844)	Critical
138172	RHEL 8 : nodejs:10 (RHSA-2020:2848)	Medium
138171	RHEL 7 : kernel (RHSA-2020:2851)	High
138170	RHEL 8 : nghttp2 (RHSA-2020:2850)	Medium
138169	RHEL 8 : nodejs:12 (RHSA-2020:2847)	Medium
138162	RHEL 7 : kernel (RHSA-2020:2831)	Medium
138161	RHEL 7 : ruby (RHSA-2020:2839)	Medium
138160	RHEL 7 : tomcat (RHSA-2020:2840)	High
138159	RHEL 7 : microcode_ctl (RHSA-2020:2842)	Low
138158	RHEL 7 : gettext (RHSA-2020:2846)	High
138157	RHEL 7 : kernel (RHSA-2020:2832)	Medium
138156	RHEL 8 : nodejs:10 (RHSA-2020:2849)	Medium
138155	RHEL 7 : php (RHSA-2020:2835)	High
138154	RHEL 7 : file (RHSA-2020:2838)	Medium
138153	RHEL 7 : kdelibs (RHSA-2020:2833)	Medium
138146	RHEL 8 : nghttp2 (RHSA-2020:2823)	Medium
138145	RHEL 6 : firefox (RHSA-2020:2824)	High
138144	RHEL 7 : firefox (RHSA-2020:2827)	High
138143	RHEL 8 : firefox (RHSA-2020:2828)	High
138142	RHEL 8 : firefox (RHSA-2020:2826)	High
138141	RHEL 8 : firefox (RHSA-2020:2825)	High
138090	RHEL 6 / 7 : RH-SSO 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 6 (Important) (RHSA-2020:2816)	Medium
138089	RHEL 6 / 7 / 8 : RH-SSO 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 7 (Important) (RHSA-2020:2814)	Medium
138073	RHEL 7 : slirp4netns (RHSA-2020:0889)	Critical
138033	RHEL 7 / 8 : OpenShift Container Platform 4.2.36 cri-o (RHSA-2020:2776)	Medium
138032	RHEL 7 / 8 : OpenShift Container Platform 4.2.36 containernetworking-plugins (RHSA-2020:2592)	Medium
138031	RHEL 8 : Red Hat OpenShift Service Mesh servicemesh-grafana (RHSA-2020:2796)	Medium
138030	RHEL 8 : Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy (RHSA-2020:2798)	High
138029	RHEL 7 : OpenShift Container Platform 4.2.36 python-psutil (RHSA-2020:2593)	Medium
138028	RHEL 8 : Red Hat OpenShift Service Mesh 1.1 servicemesh-operator (RHSA-2020:2795)	Medium
138027	RHEL 8 : Red Hat OpenShift Service Mesh servicemesh-cni (RHSA-2020:2799)	Medium
138026	RHEL 7 / 8 : OpenShift Container Platform 4.2.36 openshift (RHSA-2020:2594)	Low
138023	RHEL 6 : Red Hat JBoss Enterprise Application Platform 6.4.23 (RHSA-2020:2779)	High
138022	RHEL 6 : kernel-rt (RHSA-2020:2777)	High
138021	RHEL 7 : Red Hat JBoss Enterprise Application Platform 6.4.23 (RHSA-2020:2780)	High
138020	RHEL 5 : Red Hat JBoss Enterprise Application Platform 6.4.23 (RHSA-2020:2781)	High
138013	RHEL 8 : virt:rhel (RHSA-2020:2773)	Critical
137898	RHEL 7 : file (RHSA-2020:2768)	Medium
137897	RHEL 7 : ruby (RHSA-2020:2769)	Medium
137896	RHEL 8 : nghttp2 (RHSA-2020:2755)	Medium
137895	RHEL 7 : microcode_ctl (RHSA-2020:2680)	Low
137894	RHEL 7 : dpdk (RHSA-2020:2683)	Medium
137893	RHEL 7 : kernel (RHSA-2020:2770)	High
137892	RHEL 8 : virt:rhel (RHSA-2020:2774)	Critical
137885	RHEL 7 : OpenShift Container Platform 4.4.z jenkins-2-plugins (RHSA-2020:2737)	High

Red Hat Local Security Checks Family for Nessus