Filter
-Infinity
0
Trending
Software
puppet enterprise
90
puppet
64
puppet server
8
puppetlabs puppet enterprise
7
puppet mcollective
6
puppet continuous delivery
4
puppet puppetdb
4
puppet labs mysql
3
puppet cisco ios
2
puppet discovery
2
puppetlabs facter
2
puppet bolt
1
puppet connect
1
puppet dashboard
1
puppet device manager
1
puppet facter
1
puppet firewall
1
puppet hiera
1
puppet mcollective sshkey security puppet
1
puppet razor server
1
puppet remediate
1
puppet stdlib
1
Puppet MCollectiveMCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to e…
9.8
First published (updated )
Puppet EnterpriseThe Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly v…
5.3
First published (updated )
Puppet EnterpriseOpen redirect vulnerability in the Console in Puppet Enterprise before 2015.2.1 allows remote attack…
6.1
First published (updated )
Puppet EnterpriseOpen redirect vulnerability in the Console in Puppet Enterprise 2015.x and 2016.x before 2016.4.0 al…
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Puppet EnterprisePuppet Enterprise before 3.2.0 does not properly restrict access to node endpoints in the console, w…
First published (updated )
Puppet EnterpriseThe master external node classification script in Puppet Enterprise before 3.2.0 does not verify the…
6.4
First published (updated )
Puppet EnterpriseThe pe_mcollective module in Puppet Enterprise (PE) before 2.7.1 does not properly restrict access t…
8.5
First published (updated )
Puppet EnterprisePuppet Enterprise (PE) before 2.6.1 does not properly invalidate sessions when the session secret ha…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PuppetPuppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files…
3.3
First published (updated )
redhat/puppet-serverA Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certifica…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Puppet EnterpriseA privilege escalation allowing remote code execution was discovered in the orchestration service.
9.8
First published (updated )
Puppet EnterpriseBroken Session Management in Puppet Enterprise
9.8
EPSS
0.29%
First published (updated )
Puppet ServerDenial of Service for Revocation of Auto Renewed Certificates
7.5
EPSS
0.14%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Puppet EnterprisePuppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a special…
8
First published (updated )
Puppet EnterprisePuppet Enterprise before 3.0.1 does not set the secure flag for the session cookie in an https sessi…
First published (updated )
PuppetPuppet Enterprise 2016.4.x prior to 2016.4.12, Puppet Enterprise 2017.3.x prior to 2017.3.7, Puppet …
8.8
First published (updated )
Puppet EnterprisePuppet Enterprise versions prior to 2016.4.5 and 2017.2.1 did not correctly authenticate users befor…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Puppet EnterprisePuppet Enterprise before 3.0.1 allows remote attackers to obtain the database password via vectors r…
First published (updated )
Puppet MCollectiveVersions of MCollective prior to 2.10.4 deserialized YAML from agents without calling safe_load, all…
First published (updated )
Puppet EnterpriseThe console in Puppet Enterprise 2015.x and 2016.x prior to 2016.4.0 includes unsafe string reads th…
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.