Where
-Infinity
0

Trending

Last week
Last month
Last year

puppet Puppet EnterpriseBroken Session Management in Puppet Enterprise

Risk 61
Severity
9.8
EPSS
0.29%
First published (updated )
CVE-2023-5309

puppet Puppet EnterpriseA privilege escalation allowing remote code execution was discovered in the orchestration service.

Risk 86
Severity
9.8
First published (updated )
CVE-2023-2530

Puppet Puppet AgentA flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credential…

Risk 86
Severity
9.8
First published (updated )
CVE-2021-27023

Puppet Puppet AgentA flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be …

Risk 38
Severity
6.5
First published (updated )
CVE-2021-27025

Puppet PuppetA flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters ma…

Risk 26
Severity
4.4
First published (updated )
CVE-2021-27026
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

puppet PuppetA flaw was discovered in bolt-server and ace where running a task with sensitive parameters results …

Risk 30
Severity
4.9
First published (updated )
CVE-2021-27022

Puppet PuppetDBPuppetDB logging included potentially sensitive system information.

Risk 22
Severity
4.3
First published (updated )
CVE-2021-27019

puppet Puppet EnterprisePuppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export.

Risk 77
Severity
8.8
First published (updated )
CVE-2021-27020

puppet PuppetSQL Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2021-27021

puppet Puppet EnterpriseCSRF

Risk 77
Severity
8.8
First published (updated )
CVE-2015-5686
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

puppet Puppet EnterpriseThe express install, which is the suggested way to install Puppet Enterprise, gives the user a URL a…

Risk 86
Severity
9.8
First published (updated )
CVE-2019-10694

puppet Puppet EnterpriseXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2013-4968

puppet Puppet EnterpriseWhen users are configured to use startTLS with RBAC LDAP, at login time, the user's credentials are …

Risk 86
Severity
9.8
First published (updated )
CVE-2018-11749

puppet Puppet EnterpriseVersions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuratio…

Risk 34
Severity
5.5
First published (updated )
CVE-2017-2293

puppet Puppet EnterprisePuppet Enterprise versions prior to 2016.4.5 and 2017.2.1 did not correctly authenticate users befor…

Risk 70
Severity
7.5
First published (updated )
CVE-2017-2297
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

puppet Puppet EnterprisePuppet Enterprise 3.7.x and 3.8.0 might allow remote authenticated users to manage certificates for …

Risk 52
Severity
6.8
First published (updated )
CVE-2015-4100

puppet Puppet EnterpriseInfoleak

Risk 37
Severity
6.5
First published (updated )
CVE-2015-8470

puppet Puppet EnterpriseXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2015-6502

puppet Puppet EnterprisePuppet Enterprise 2015.3.3 and 2016.x before 2016.4.0, and Puppet Agent 1.3.6 through 1.7.0 allow re…

Risk 66
Severity
7.2
First published (updated )
CVE-2016-5714

puppet Puppet EnterpriseThe console in Puppet Enterprise 2015.x and 2016.x prior to 2016.4.0 includes unsafe string reads th…

Risk 79
Severity
8.8
First published (updated )
CVE-2016-5716
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

puppet Puppet EnterpriseInteger Overflow

Risk 45
Severity
7.5
First published (updated )
CVE-2017-7529

puppet Puppet EnterpriseInfoleak

Risk 43
Severity
7.5
First published (updated )
CVE-2017-2294

puppet Puppet EnterpriseOpen redirect vulnerability in the Console in Puppet Enterprise before 2015.2.1 allows remote attack…

Risk 38
Severity
6.1
First published (updated )
CVE-2015-6501

Puppet Puppet AgentInput Validation

Risk 86
Severity
9.8
First published (updated )
CVE-2016-2786

puppet Puppet EnterprisePuppet Enterprise 2015.3 before 2015.3.1 allows remote attackers to bypass a host whitelist protecti…

Risk 79
Severity
8.8
First published (updated )
CVE-2015-7330
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

puppet Puppet EnterpriseInfoleak

Risk 28
Severity
4.7
First published (updated )
CVE-2015-7328

Puppet Stdlib PuppetThe puppetlabs-stdlib module 2.1 through 3.0 and 4.1.0 through 4.5.x before 4.5.1 for Puppet 2.8.8 a…

Risk 46
Severity
6.5
First published (updated )
CVE-2015-1029

puppet Puppet EnterpriseInfoleak

Risk 21
Severity
4
First published (updated )
CVE-2014-9355

Puppet FacterLast updated 24 July 2024

Risk 55
Severity
6.2
First published (updated )
CVE-2014-3248

Puppet Puppet EnterpriseRace Condition

Risk 32
Severity
4.4
First published (updated )
CVE-2014-3251
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203