Where
-Infinity
0

Trending

Last week
Last month
Last year

redhat/cfmeRed Hat CloudForms 4.7 and 5 is affected by a role-based privilege escalation flaw. An attacker with…

Risk 60
Severity
8.1
First published (updated )
CVE-2020-25716

redhat/cfme-gemset 5.11.8.1CSRF

Risk 47
Severity
6.8
First published (updated )
CVE-2020-14369

redhat/cfmeRed Hat CloudForms was vulnerable to the User Impersonation authorization flaw which allows maliciou…

Risk 66
Severity
9.1
First published (updated )
CVE-2020-14325

redhat CloudformsCSRF

Risk 77
Severity
8.8
First published (updated )
CVE-2014-0197

redhat CloudformsCloudForms stores user passwords in recoverable format

Risk 32
Severity
5.5
First published (updated )
CVE-2013-4423
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat CloudformsXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2013-0186

redhat Cfme-gemsetcfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to an …

Risk 22
Severity
4.3
First published (updated )
CVE-2019-10159

rubygems/actionviewInput Validation

Risk 47
Severity
7.8
First published (updated )
CVE-2019-5419

redhat/activejobA Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft us…

Risk 43
Severity
7.5
First published (updated )
CVE-2018-16476

redhat CloudformsCode Injection

Risk 78
Severity
9
First published (updated )
CVE-2016-5402
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat CloudForms Management EngineIt was found that the CloudForms before 5.6.2.2, and 5.7.0.7 did not properly apply permissions cont…

Risk 78
Severity
9
First published (updated )
CVE-2016-7071

redhat CloudForms Management EngineA logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant admi…

Risk 30
Severity
4.9
First published (updated )
CVE-2017-2632

redhat CloudformsIt was found that CloudForms does not verify that the server hostname matches the domain name in the…

Risk 43
Severity
7.5
First published (updated )
CVE-2017-2639

redhat/cfmeOS Command Injection

Risk 69
Severity
7.8
First published (updated )
CVE-2018-10905

Debian Debian LinuxMalicious File Upload, Path Traversal

Risk 88
Severity
9.8
First published (updated )
CVE-2018-1000544
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Sprockets Project SprocketsPath Traversal, Infoleak

Risk 45
Severity
7.5
First published (updated )
CVE-2018-3760

redhat CloudformsXSS

Risk 39
Severity
6.1
First published (updated )
CVE-2018-11627

redhat/ansible-towerAnsible Tower before version 3.2.4 has a flaw in the management of system and organization administr…

Risk 66
Severity
7.2
First published (updated )
CVE-2018-1101

Red Hat CloudFormsImportant: Red Hat CloudForms 4.2 security update

Risk 37
First published (updated )
Advisory
RHSA-2018:0090

supervisord supervisorThe XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x bef…

Risk 82
Severity
9
First published (updated )
CVE-2017-11610
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/cfmeLibor Pichler and Martin Povolny report: Cloudforms lacks RBAC controls on a variety of methods pot…

Risk 38
Severity
6.5
First published (updated )
CVE-2017-2664

redhat/cfmeInput Validation

Risk 38
Severity
6.5
First published (updated )
CVE-2017-2653

redhat/cfmeInfoleak

Risk 22
Severity
4.3
First published (updated )
CVE-2016-7047

redhat CloudformsThe web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via…

Risk 79
Severity
8.8
First published (updated )
CVE-2016-5383

redhat CloudformsManageIQ in CloudForms before 4.1 allows remote authenticated users to execute arbitrary code.

Risk 81
Severity
8.8
First published (updated )
CVE-2016-4471
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat CloudForms Management EngineInfoleak

Risk 30
Severity
5.1
First published (updated )
CVE-2015-7502

Red Hat CloudForms Management EngineSQL Injection

Risk 32
Severity
7
First published (updated )
REDHAT-BUG-959062

Red Hat CloudForms Management EngineRuby on Rails uses a HMAC for verifying the integrity of signed cookies. To prevent session hash tam…

Risk 32
Severity
7
First published (updated )
REDHAT-BUG-959041

redhat CloudformsPulp in Red Hat CloudForms before 1.1 logs administrative passwords in a world-readable file, which …

Risk 19
Severity
3.3
First published (updated )
CVE-2012-3538

redhat CloudformsJames Labocki of Red Hat reports: The /var/lib/pulp/cache/grinder directory is world-writeable

Risk 14
Severity
2.1
First published (updated )
CVE-2012-5605
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203