Where
-Infinity
0

Trending

Last week
Last month
Last year

Puppet Puppet AgentDeserialization of untrusted data

Risk 61
Severity
6.6
First published (updated )
CVE-2021-27017

Puppet Puppet ServerDenial of Service for Revocation of Auto Renewed Certificates

Risk 31
Severity
7.5
EPSS
0.14%
First published (updated )
CVE-2023-5255

Puppet Puppet AgentA flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credential…

Risk 86
Severity
9.8
First published (updated )
CVE-2021-27023

Puppet Puppet AgentA flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be …

Risk 38
Severity
6.5
First published (updated )
CVE-2021-27025

Puppet PuppetA flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters ma…

Risk 26
Severity
4.4
First published (updated )
CVE-2021-27026
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

puppet PuppetA flaw was discovered in bolt-server and ace where running a task with sensitive parameters results …

Risk 30
Severity
4.9
First published (updated )
CVE-2021-27022

puppet PuppetSQL Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2021-27021

rubygems/chloridePrior to version 0.3.0, chloride's use of net-ssh resulted in host fingerprints for previously unkno…

Risk 44
Severity
7.5
First published (updated )
CVE-2018-6517

Puppet Puppet AgentCode Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2016-5713

puppet Puppet EnterprisePuppet Enterprise 2015.3.3 and 2016.x before 2016.4.0, and Puppet Agent 1.3.6 through 1.7.0 allow re…

Risk 66
Severity
7.2
First published (updated )
CVE-2016-5714
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Puppet Puppet AgentInput Validation

Risk 86
Severity
9.8
First published (updated )
CVE-2016-2786

puppet PuppetPuppet Server before 2.3.2 and Ruby puppetmaster in Puppet 4.x before 4.4.2 and in Puppet Agent befo…

Risk 87
Severity
9.8
First published (updated )
CVE-2016-2785

puppet Puppet 4Reached end of life

EOL
Oct 1, 2018
First published (updated )
EOL-puppet-4

puppet Puppet 4Reached end of life

EOL
Oct 1, 2018
First published (updated )
latest-version-puppet-4

Puppet FacterLast updated 24 July 2024

Risk 55
Severity
6.2
First published (updated )
CVE-2014-3248
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Puppet PuppetThe default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationChec…

Risk 39
Severity
6.5
First published (updated )
CVE-2014-3250

puppet PuppetPuppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote …

Risk 36
Severity
5.5
First published (updated )
CVE-2011-0528

Canonical Ubuntu LinuxPuppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.…

Risk 13
Severity
2.1
First published (updated )
CVE-2013-4969

Puppet PuppetPuppet Module Tool (PMT), as used in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet E…

Risk 25
Severity
3.6
First published (updated )
CVE-2013-4956

Puppet PuppetUnspecified vulnerability in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterpris…

Risk 38
Severity
5.1
First published (updated )
CVE-2013-4761
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Puppetlabs PuppetInput Validation

Risk 53
Severity
7.5
First published (updated )
CVE-2013-3567

Puppetlabs PuppetPuppet Labs Puppet Enterprise before 2.8.0 does not use a "randomized secret" in the CAS client conf…

Risk 26
Severity
5
First published (updated )
CVE-2013-2716

Puppet PuppetPuppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated user…

Risk 46
Severity
6.5
First published (updated )
CVE-2013-2274

Puppet PuppetPuppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.…

Risk 30
Severity
4.9
First published (updated )
CVE-2013-1652

Puppet PuppetPuppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, and Puppet Enterprise 2.7.x before 2.7.2, does no…

Risk 26
Severity
5
First published (updated )
CVE-2013-1654
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Puppet PuppetPuppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.…

Risk 62
Severity
7.1
First published (updated )
CVE-2013-1653

Puppet PuppetThe (1) template and (2) inline_template functions in the master server in Puppet before 2.6.18, 2.7…

Risk 78
Severity
9
First published (updated )
CVE-2013-1640

Puppet PuppetInput Validation

Risk 53
Severity
7.5
First published (updated )
CVE-2013-1655

Puppet PuppetThe default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before …

Risk 21
Severity
4
First published (updated )
CVE-2013-2275

puppet Puppet 3Reached end of life

EOL
Jan 1, 2017
First published (updated )
EOL-puppet-3
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203