Where
-Infinity
0

Trending

Last week
Last month
Last year

Foreman ForemanForeman: foreman: oauth secret exposure via unauthenticated access to the graphql api

Risk 43
Severity
7.5
First published (updated )
CVE-2024-6861

Foreman ForemanA flaw was found in foreman before version 3.3. The server exposes a GraphQL API with limited access…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2317450

The Foreman ForemanAn issue in templates related to loader macros which were introduced together with report templates.…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2312524

gunicorn gunicornAn authentication bypass vulnerability has been identified in Foreman when deployed with Gunicorn ve…

Risk 72
First published (updated )
REDHAT-BUG-2305718

theforeman foremanForeman: command injection in "host init config" template via "install packages" field on foreman

Risk 44
Severity
6.5
EPSS
0.04%
First published (updated )
CVE-2024-7700
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Foreman ForemanCommand Injection

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2304090

redhat SatelliteForeman: arbitrary code execution through templates

Risk 72
Severity
9.1
First published (updated )
CVE-2023-0118

theforeman Foreman AnsibleAn authorization flaw was found in Foreman Ansible. An authenticated attacker with certain permissio…

Risk 67
Severity
8
First published (updated )
CVE-2021-3589

theforeman foremanInfoleak

Risk 81
Severity
8.8
First published (updated )
CVE-2021-3590

theforeman foremanOS Command Injection, Command Injection

Risk 78
Severity
9
First published (updated )
CVE-2021-3584
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/smart_proxy_openscapAn improper authorization handling flaw was found in Foreman. The OpenSCAP plugin for the smart-prox…

Risk 43
Severity
6.1
First published (updated )
CVE-2021-20290

theforeman foremanInfoleak

Risk 71
Severity
7.8
First published (updated )
CVE-2021-20260

Foreman Datacenter pluginA password leak was identified on Foreman project which will expose password in plaintext through Fo…

Risk 18
Severity
4
First published (updated )
REDHAT-BUG-1932181

redhat/foreman-installerA flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellit…

Risk 27
Severity
4.4
First published (updated )
CVE-2020-10710

debianInput Validation

Risk 27
Severity
5.3
First published (updated )
CVE-2014-0091
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

theforeman foremanIn Foreman it was discovered that the delete compute resource operation, when executed from the Fore…

Risk 30
Severity
4.9
First published (updated )
CVE-2019-3893

theforeman foremanXSS, CSRF

Risk 62
Severity
7.6
First published (updated )
CVE-2018-16861

redhat/foremanXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2018-14664

rubygems/smart_proxy_dynflowAn authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman. A mali…

Risk 89
Severity
10
First published (updated )
CVE-2018-14643

The Foreman smart_proxy_dynflowA vulnerability was discovered in the Foreman Remote Execution feature, allowing an unauthorized rem…

Risk 89
First published (updated )
REDHAT-BUG-1629063
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

theforeman foremanInfoleak

Risk 22
Severity
4.3
First published (updated )
CVE-2016-7077

theforeman foremanInfoleak

Risk 23
Severity
4.3
First published (updated )
CVE-2016-7078

theforeman foremanXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2016-8634

theforeman foremanXSS

Risk 39
Severity
6.4
First published (updated )
CVE-2016-8613

The Foreman ForemanA flaw was found in foreman. The issue allows users with limited permissions for powering oVirt/RHV …

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-1561723
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

theforeman foremanInfoleak

Risk 79
Severity
8.8
First published (updated )
CVE-2018-1097

redhat/foremanSQL Injection

Risk 38
Severity
6.5
First published (updated )
CVE-2018-1096

The Foreman ForemanA cross-site scripting vulnerability was found in foreman in pages where facts are submitted through…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-1508551

theforeman foremanXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2017-15100

theforeman foremanEric Helms of Red Hat reports: Users can access resources in other organizations via the API if the…

Risk 52
Severity
7.4
First published (updated )
CVE-2014-8183
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203