Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 630

Export CSV
CVE-2022-24790

HTTP Request Smuggling in puma

Puma is a simple, fast, multi-threaded, parallel HTTP 1.1 server for Ruby/Rack applications. When using Puma behind a proxy that does not properly validate that the incoming HTTP request matches the RFC7230 standard, Puma and the frontend proxy may disagree on where a request starts and ends. This would allow requests to be smuggled via the front-end proxy to Puma. The vulnerability has been fixed in 5.6.4 and 4.3.12. Users are advised to upgrade as soon as possible. Workaround: when deploying a proxy in front of Puma, turning on any and all functionality to make sure that the request matches the RFC7230 standard.

CVSS 3.1 · 9.1 Critical EPSS 2.2% KEV · Not listed
Vendors
Debian Fedoraproject Puma and 1 more
Products
Debian Linux Fedora Puma and 2 more
CVE-2014-8180

6: mongodb accessible by local users without authentication resulting in Denial of Service

MongoDB on Red Hat Satellite 6 allows local users to bypass authentication by logging in with an empty password and delete information which can cause a Denial of Service.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mongodb Redhat
Products
Mongodb Satellite
CVE-2016-4996

foreman: inside discovery-debug, the root password is displayed in plaintext

discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root password in plaintext in the system journal when used to log in, which allows local users with access to the system journal to obtain the root password by reading the system journal, or by clicking Logs on the console.

CVSS 3.0 · 7.0 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Server Satellite Satellite Capsule
CVE-2014-8168

Satellite: Local user can access MongoDB and delete database

Red Hat Satellite 6 allows local users to access mongod and delete pulp_database.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Satellite
CVE-2014-8163

Satellite5: upload_crash_file and upload_result directory traversal

Directory traversal vulnerability in the XMLRPC interface in Red Hat Satellite 5.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Redhat
Products
Satellite
CVE-2014-4616

python: missing boundary check in JSON module

Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.

CVSS 3.1 · 5.9 Medium EPSS 7.8% KEV · Not listed
Vendors
Opensuse Opensuse Project Python and 2 more
Products
Opensuse Opensuse Python and 5 more
CVE-2016-3112

pulp: Agent certificate containing private key is stored in world-readable file

client/consumer/cli.py in Pulp before 2.8.3 writes consumer private keys to etc/pki/pulp/consumer/consumer-cert.pem as world-readable, which allows remote authenticated users to obtain the consumer private keys and escalate privileges by reading /etc/pki/pulp/consumer/consumer-cert, and authenticating as a consumer user.

CVSS 3.0 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Pulpproject Redhat
Products
Pulp Satellite Satellite Capsule
CVE-2016-3111

pulp: Race condition when generating RSA keys for authenticating messages between server and consumers

pulp.spec in the installation process for Pulp 2.8.3 generates the RSA key pairs used to validate messages between the pulp server and pulp consumers in a directory that is world-readable before later modifying the permissions, which might allow local users to read the generated RSA keys via reading the key files while the installation process is running.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Pulpproject Redhat
Products
Pulp Satellite Satellite Capsule
CVE-2016-3108

pulp: Insecure temporary file used when generating certificate for Pulp Nodes

The pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or write to arbitrary files via a symlink attack.

CVSS 3.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Pulpproject Redhat
Products
Pulp Satellite Satellite Capsule
CVE-2016-3107

pulp: Node certificate containing private key stored in world-readable file

The Node certificate in Pulp before 2.8.3 contains the private key, and is stored in a world-readable file in the "/etc/pki/pulp/nodes/" directory, which allows local users to gain access to sensitive data.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Pulpproject Redhat
Products
Pulp Satellite Satellite Capsule
CVE-2016-2104

5: stored and reflected XSS vulnerabilities

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via (1) the label parameter to admin/BunchDetail.do; (2) the package_name, (3) search_subscribed_channels, or (4) channel_filter parameter to software/packages/NameOverview.do; or unspecified vectors related to (5) <input:hidden> or (6) <bean:message> tags.

CVSS 3.0 · 6.1 Medium EPSS 1.2% KEV · Not listed
Vendors
Redhat
Products
Network Satellite Satellite
CVE-2014-3531

foreman: XSS with operating system name/description

Multiple cross-site scripting (XSS) vulnerabilities in Foreman before 1.5.2 allow remote authenticated users to inject arbitrary web script or HTML via the operating system (1) name or (2) description.

CVSS 3.0 · 5.4 Medium EPSS 1.2% KEV · Not listed
Vendors
Redhat Theforeman
Products
Satellite Foreman
CVE-2016-10516

python-werkzeug: Cross-site scripting in render_full function in debug/tbtools.py

Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 (as used in Pallets Flask and other products) allows remote attackers to inject arbitrary web script or HTML via a field that contains an exception message.

CVSS 3.0 · 6.1 Medium EPSS 2.0% KEV · Not listed
Vendors
Palletsprojects Redhat
Products
Werkzeug Satellite Satellite Capsule
CVE-2014-0208

foreman: XSS in key name auto-completion

Cross-site scripting (XSS) vulnerability in the search auto-completion functionality in Foreman before 1.4.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted key name.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Theforeman
Products
Satellite Foreman
CVE-2017-7233

python-django: Open redirect and possible XSS attack via user-supplied numeric redirect URLs

Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The security check for these redirects (namely ``django.utils.http.is_safe_url()``) considered some numeric URLs "safe" when they shouldn't be, aka an open redirect vulnerability. Also, if a developer relies on ``is_safe_url()`` to provide safe redirect targets and puts such a URL into a link, they could suffer from an XSS attack.

CVSS 3.0 · 6.1 Medium EPSS 2.4% KEV · Not listed
Vendors
Djangoproject Redhat
Products
Django Openstack Satellite and 1 more
CVE-2017-5929

logback: Serialization vulnerability in SocketServer and ServerSocketReceiver

QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.

CVSS 3.1 · 9.8 Critical EPSS 7.5% KEV · Not listed
Vendors
Qos Redhat
Products
Logback Jboss Amq Jboss Bpms and 4 more
CVE-2017-3544

OpenJDK: newline injection in the SMTP client (Networking, 8171533)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).

CVSS 3.0 · 3.7 Low EPSS 2.0% KEV · Not listed
Vendors
Debian Google Oracle and 1 more
Products
Debian Linux Android Jdk and 14 more