Filter
AND
AND
CVE-2024-7923Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore
9.8
EPSS
0.07%
First published (updated )
Redhat SatellitePuppet-foreman: an authentication bypass vulnerability exists in foreman
9.8
EPSS
0.07%
First published (updated )
Theforeman ForemanArbitrary code execution through yaml global parameters
9.1
First published (updated )
Redhat SatelliteForeman: arbitrary code execution through templates
9.1
First published (updated )
rubygems/foremanOs command injection via ct_command and fcct_command
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Theforeman ForemanOS Command Injection, Command Injection
First published (updated )
redhat/javaFrom Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a…
9.1
First published (updated )
Redhat Enterprise Linux DesktopBuffer Overflow, Input Validation
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat SatelliteIt was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XML…
9.8
First published (updated )
Oracle JDKIt was found that the Hotspot component of OpenJDK did not perform loader constraints checks in cert…
9.6
First published (updated )
Oracle JDKA flaw was found in the privileged code used to handle unreferenced objects in the Target class in t…
9.6
First published (updated )
Redhat Enterprise Linux EusIt was discovered that the DCG (Distributed Garbage Collector) implementation in the RMI component o…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Enterprise Linux EusIt was discovered that the implementation of the TransformerException class in the JAXP component of…
9.6
First published (updated )
Redhat Enterprise Linux EusIt was discovered that the JAXP component of OpenJDK failed to restrict access to certain internal c…
9.6
First published (updated )
Redhat Enterprise Linux EusIt was discovered that the implementation of the ImageWatched class in the AWT component of OpenJDK …
9.6
First published (updated )
Redhat Enterprise Linux EusIt was discovered that the implementation of the ThreadPoolExecutor class in the java.util.concurren…
9.6
First published (updated )
Redhat Enterprise Linux EusIt was discovered that the implementation of the AsynchronousChannelGroupImpl class in the java.nio.…
9.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Enterprise Linux EusIt was discovered that the implementation of the ServiceRegistry class in the ImageIO component of O…
9.6
First published (updated )
Redhat Enterprise Linux EusIt was discovered that the implementation of the ActivationID class in the RMI component of OpenJDK …
9.6
First published (updated )
FasterXML jackson-databindAn unsafe deserialization vulnerability was found due to incomplete blacklisting of the unsafe eleme…
9.8
First published (updated )
Redhat SatelliteIt was found that spacewalk-channel can be used by non-admin or disabled users for performing admini…
9.8
First published (updated )
Qos LogbackQOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerS…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/javaOracle Java SE and JRockit Unspecified Vulnerability
First published (updated )
Pulpproject QpidThe Qpid server on Red Hat Satellite 6 does not properly restrict message types, which allows remote…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.