Filter
Versions
CVE-2024-7923Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore
9.8
EPSS
0.07%
First published (updated )
Theforeman ForemanForeman: command injection in "host init config" template via "install packages" field on foreman
6.5
EPSS
0.04%
First published (updated )
Redhat SatellitePuppet-foreman: an authentication bypass vulnerability exists in foreman
9.8
EPSS
0.07%
First published (updated )
Katello Project Katello ForemanKatello: potential cross-site scripting exploit in ui
4.8
EPSS
0.04%
First published (updated )
Redhat SatelliteForeman-installer: candlepin database password being leaked to local users via the process list
6.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache Tomcat- Rapid Reset HTTP/2 vulnerability
First published (updated )
Redhat Ansible Automation PlatformHub: insecure galaxy-importer tarfile extraction
6.5
First published (updated )
Redhat SatelliteSatellite: arithmetic overflow in satellite
7.6
First published (updated )
Theforeman ForemanForeman: world readable file containing secrets
6.7
First published (updated )
Candlepinproject CandlepinImproper authorization check in the server component
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Theforeman ForemanArbitrary code execution through yaml global parameters
9.1
First published (updated )
Redhat SatelliteForeman: arbitrary code execution through templates
9.1
First published (updated )
redhat/foremanForeman: stored cross-site scripting in host tab
5.4
First published (updated )
Redhat SatelliteA blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to …
4.5
First published (updated )
rubygems/foremanOs command injection via ct_command and fcct_command
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Pulpproject Pulp AnsibleThe collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted …
5.5
First published (updated )
Qos LogbackRCE from attacker with configuration edit priviledges through JNDI lookup
8.5
First published (updated )
Djangoproject DjangoHTTP requests for URLs with trailing newlines could bypass an upstream access control based on URL p…
7.5
First published (updated )
Theforeman Foreman AnsibleAn authorization flaw was found in Foreman Ansible. An authenticated attacker with certain permissio…
8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Theforeman ForemanOS Command Injection, Command Injection
First published (updated )
Redhat SatelliteGiving granular permission related to the organiztion with other permissions allowing a user to view…
8.1
First published (updated )
redhat/candlepinAn account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with prop…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/foremanA flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files. These …
8.8
First published (updated )
redhat/tfm-rubygem-foreman_ansibleThe "User input" entry from Job Invocation may contain plaintext password or other sensitive data. A…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.