Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how puppetlabs compares to other vendors in security performance

View Risk Score →

Puppet Puppet EnterpriseThe Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly v…

Risk 27
Severity
5.3
First published (updated )
CVE-2016-2787

Puppetlabs Mcollective-puppet-agent PuppetThe mcollective-puppet-agent plugin before 1.11.1 for Puppet allows remote attackers to execute arbi…

Risk 42
Severity
6.6
First published (updated )
CVE-2015-7331

Puppet FacterInfoleak

Risk 13
Severity
2.1
First published (updated )
CVE-2015-1426

Puppet FacterLast updated 24 July 2024

Risk 55
Severity
6.2
First published (updated )
CVE-2014-3248

Puppet Puppet EnterpriseRace Condition

Risk 32
Severity
4.4
First published (updated )
CVE-2014-3251
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Puppet Puppet EnterpriseThe pe_mcollective module in Puppet Enterprise (PE) before 2.7.1 does not properly restrict access t…

Risk 72
Severity
8.5
First published (updated )
CVE-2013-1398

Puppet Puppet EnterprisePuppet Enterprise (PE) before 2.6.1 does not properly invalidate sessions when the session secret ha…

Risk 21
Severity
4
First published (updated )
CVE-2012-5158

Puppet Puppet EnterpriseCSRF

Risk 47
Severity
6.8
First published (updated )
CVE-2013-1399

Canonical Ubuntu LinuxPuppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.…

Risk 13
Severity
2.1
First published (updated )
CVE-2013-4969

Puppet PuppetPuppet Module Tool (PMT), as used in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet E…

Risk 25
Severity
3.6
First published (updated )
CVE-2013-4956
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Puppet PuppetUnspecified vulnerability in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterpris…

Risk 38
Severity
5.1
First published (updated )
CVE-2013-4761

Puppetlabs PuppetInput Validation

Risk 53
Severity
7.5
First published (updated )
CVE-2013-3567

Puppetlabs PuppetPuppet Labs Puppet Enterprise before 2.8.0 does not use a "randomized secret" in the CAS client conf…

Risk 26
Severity
5
First published (updated )
CVE-2013-2716

Puppet PuppetPuppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated user…

Risk 46
Severity
6.5
First published (updated )
CVE-2013-2274

Puppet PuppetPuppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.…

Risk 30
Severity
4.9
First published (updated )
CVE-2013-1652
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Puppet PuppetPuppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, and Puppet Enterprise 2.7.x before 2.7.2, does no…

Risk 26
Severity
5
First published (updated )
CVE-2013-1654

Puppet PuppetPuppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.…

Risk 62
Severity
7.1
First published (updated )
CVE-2013-1653

Puppet PuppetInput Validation

Risk 53
Severity
7.5
First published (updated )
CVE-2013-1655

Puppet PuppetThe default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before …

Risk 21
Severity
4
First published (updated )
CVE-2013-2275

Puppet Puppet Enterpriselib/puppet/network/authstore.rb in Puppet before 2.7.18, and Puppet Enterprise before 2.5.2, support…

Risk 15
Severity
2.6
First published (updated )
CVE-2012-3408
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Puppet PuppetInput Validation

Risk 23
Severity
4.3
First published (updated )
CVE-2012-3867

Puppet Puppetlib/puppet/defaults.rb in Puppet 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, uses 0644 …

Risk 14
Severity
2.1
First published (updated )
CVE-2012-3866

Puppet PuppetPath Traversal

Risk 19
Severity
3.5
First published (updated )
CVE-2012-3865

Puppet PuppetInfoleak

Risk 22
Severity
4
First published (updated )
CVE-2012-3864

Puppet Puppettelnet.rb in Puppet 2.7.x before 2.7.13 and Puppet Enterprise (PE) 1.2.x, 2.0.x, and 2.5.x before 2.…

Risk 25
Severity
3.6
First published (updated )
CVE-2012-1989
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Puppet PuppetThe change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.…

Risk 59
Severity
6.9
First published (updated )
CVE-2012-1053

Puppet PuppetPuppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x…

Risk 23
Severity
3.3
First published (updated )
CVE-2012-1906

Puppet PuppetPuppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x…

Risk 32
Severity
4.4
First published (updated )
CVE-2012-1054

Puppet PuppetPuppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x…

Risk 13
Severity
2.1
First published (updated )
CVE-2012-1986

Puppet PuppetUnspecified vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterpri…

Risk 19
Severity
3.5
First published (updated )
CVE-2012-1987
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203