Where
-Infinity
0

Trending

Last week
Last month
Last year

Puppet puppet resource_apiCleartext Storage of Sensitive Information for Puppet Resource API

Risk 25
Severity
6.7
EPSS
0.08%
First published (updated )
CVE-2026-8804

redhat/puppet-serverA Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certifica…

Risk 27
Severity
5.3
First published (updated )
CVE-2023-1894

puppet Puppet EnterpriseInfoleak

Risk 45
Severity
7.5
First published (updated )
CVE-2020-7943

ruby-lang RubyInput Validation

Risk 36
Severity
5.9
First published (updated )
CVE-2015-1855

Puppet pe-razor-serverCode Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2018-6512
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

puppet PuppetPuppet Enterprise 2016.4.x prior to 2016.4.12, Puppet Enterprise 2017.3.x prior to 2017.3.7, Puppet …

Risk 79
Severity
8.8
First published (updated )
CVE-2018-6513

puppet Puppet EnterpriseXSS Vulnerability in Puppet Enterprise Console

Risk 34
Severity
5.4
First published (updated )
CVE-2018-6510

puppet Puppet EnterpriseXSS Vulnerability in Puppet Enterprise Console

Risk 34
Severity
5.4
First published (updated )
CVE-2018-6511

redhat/puppet-agentIn previous versions of Puppet Agent it was possible for the agent to retrieve facts from an environ…

Risk 39
Severity
6.5
First published (updated )
CVE-2017-10690

puppet Puppet EnterprisePuppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a special…

Risk 71
Severity
8
First published (updated )
CVE-2018-6508
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/puppetLast updated 25 August 2025

Risk 33
Severity
5.5
First published (updated )
CVE-2017-10689

puppet Puppet EnterpriseInput Validation

Risk 38
Severity
6.5
First published (updated )
CVE-2017-2296

Puppet Marionette CollectiveMCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to e…

Risk 86
Severity
9.8
First published (updated )
CVE-2016-2788

Puppet Puppet EnterpriseThe Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly v…

Risk 27
Severity
5.3
First published (updated )
CVE-2016-2787

puppet Puppet EnterpriseInput Validation

Risk 27
Severity
5.3
First published (updated )
CVE-2016-9686
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

puppet Puppet EnterpriseOpen redirect vulnerability in the Console in Puppet Enterprise 2015.x and 2016.x before 2016.4.0 al…

Risk 38
Severity
6.1
First published (updated )
CVE-2016-5715

puppet Puppet EnterpriseInfoleak

Risk 26
Severity
5
First published (updated )
CVE-2014-3249

Puppet Puppet EnterpriseThe pe_mcollective module in Puppet Enterprise (PE) before 2.7.1 does not properly restrict access t…

Risk 72
Severity
8.5
First published (updated )
CVE-2013-1398

Puppet Puppet EnterprisePuppet Enterprise (PE) before 2.6.1 does not properly invalidate sessions when the session secret ha…

Risk 21
Severity
4
First published (updated )
CVE-2012-5158

Puppet Puppet EnterpriseCSRF

Risk 47
Severity
6.8
First published (updated )
CVE-2013-1399
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Puppet Puppet DashboardXSS

Risk 22
Severity
4.3
First published (updated )
CVE-2012-0891

puppet Puppet EnterpriseCSRF

Risk 47
Severity
6.8
First published (updated )
CVE-2013-4963

puppet Puppet EnterprisePuppet Enterprise before 3.2.0 does not properly restrict access to node endpoints in the console, w…

Risk 26
Severity
5
First published (updated )
CVE-2013-4971

puppet Puppet EnterpriseThe master external node classification script in Puppet Enterprise before 3.2.0 does not verify the…

Risk 40
Severity
6.4
First published (updated )
CVE-2013-4966

puppet Puppet EnterpriseInfoleak

Risk 13
Severity
2.1
First published (updated )
CVE-2013-4959
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

puppet Puppet EnterprisePuppet Enterprise before 3.0.1 does not use a session timeout, which makes it easier for attackers t…

Risk 59
Severity
6.9
First published (updated )
CVE-2013-4958

puppet Puppet EnterpriseThe reset password page in Puppet Enterprise before 3.0.1 does not force entry of the current passwo…

Risk 35
Severity
5.8
First published (updated )
CVE-2013-4962

puppet Puppet EnterpriseInput Validation

Risk 35
Severity
5.8
First published (updated )
CVE-2013-4762

Puppet Puppet Enterpriselib/puppet/network/authstore.rb in Puppet before 2.7.18, and Puppet Enterprise before 2.5.2, support…

Risk 15
Severity
2.6
First published (updated )
CVE-2012-3408

Puppet PuppetThe change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.…

Risk 59
Severity
6.9
First published (updated )
CVE-2012-1053
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203