Filter
AND
-Infinity
0
Trending
Puppet ServerDenial of Service for Revocation of Auto Renewed Certificates
7.5
First published (updated )
Puppet Continuous DeliveryA flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user wi…
8.1
First published (updated )
Puppet RemediateThe mechanism which performs certificate validation was discovered to have a flaw that resulted in c…
7.5
First published (updated )
Puppet EnterprisePuppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export.
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Puppet EnterprisePuppet Server and PuppetDB provide useful performance and debugging information via their metrics AP…
7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
rubygems/chloridePrior to version 0.3.0, chloride's use of net-ssh resulted in host fingerprints for previously unkno…
7.5
First published (updated )
Puppet Device ManagerPrevious releases of the Puppet device_manager module creates configuration files containing credent…
7.8
First published (updated )
Puppet EnterpriseOn Windows only, with a specifically crafted configuration file an attacker could get Puppet PE clie…
7.8
First published (updated )
PuppetPuppet Enterprise 2016.4.x prior to 2016.4.12, Puppet Enterprise 2017.3.x prior to 2017.3.7, Puppet …
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PuppetIn Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior…
7.8
First published (updated )
Puppet EnterprisePuppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a special…
8
First published (updated )
Puppet EnterprisePuppet Enterprise versions prior to 2016.4.5 and 2017.2.1 did not correctly authenticate users befor…
7.5
First published (updated )
Puppet EnterprisePuppet Enterprise 2015.3.3 and 2016.x before 2016.4.0, and Puppet Agent 1.3.6 through 1.7.0 allow re…
7.2
First published (updated )
PuppetVersions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 make it very easy to accidentally…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Puppet EnterpriseThe console in Puppet Enterprise 2015.x and 2016.x prior to 2016.4.0 includes unsafe string reads th…
8.8
First published (updated )
Puppet EnterprisePuppet Enterprise 2015.3 before 2015.3.1 allows remote attackers to bypass a host whitelist protecti…
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Puppet EnterpriseThe pe_mcollective module in Puppet Enterprise (PE) before 2.7.1 does not properly restrict access t…
8.5
First published (updated )
PuppetPuppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.…
7.1
First published (updated )