Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 329

Export CSV
CVE-2021-44420

django: potential bypass of an upstream access control based on URL paths

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

CVSS 3.1 · 7.3 High EPSS 2.4% KEV · Not listed
Vendors
Canonical Debian Djangoproject and 2 more
Products
Ubuntu Linux Debian Linux Django and 4 more
CVE-2021-3584

foreman: Authenticate remote code execution through Sendmail configuration

A server side remote code execution vulnerability was found in Foreman project. A authenticated attacker could use Sendmail configuration options to overwrite the defaults and perform command injection. The highest threat from this vulnerability is to confidentiality, integrity and availability of system. Fixed releases are 2.4.1, 2.5.1, 3.0.0.

CVSS 3.1 · 7.2 High EPSS 4.0% KEV · Not listed
Vendors
Redhat Theforeman
Products
Satellite Satellite Capsule Satellite Utils and 1 more
CVE-2021-3494

foreman: possible man-in-the-middle in smart_proxy realm_freeipa

A smart proxy that provides a restful API to various sub-systems of the Foreman is affected by the flaw which can cause a Man-in-the-Middle attack. The FreeIPA module of Foreman smart proxy does not check the SSL certificate, thus, an unauthenticated attacker can perform actions in FreeIPA if certain conditions are met. The highest threat from this flaw is to system confidentiality. This flaw affects Foreman versions before 2.5.0.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Theforeman
Products
Satellite Satellite Capsule Foreman
CVE-2021-3413

Satellite: Azure compute resource secret_key leak to authenticated users

A flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0. A credential leak was identified which will expose Azure Resource Manager's secret key through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Theforeman
Products
Satellite Satellite Capsule Foreman Azurerm
CVE-2021-3200

libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c

Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service

CVSS 3.1 · 3.3 Low EPSS 1.3% KEV · Not listed
Vendors
Opensuse Oracle Redhat
Products
Libsolv Communications Cloud Native Core Policy Enterprise Linux and 2 more
CVE-2021-33938

libsolv: heap-based buffer overflow in prune_to_recommended() in src/policy.c

Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Opensuse Redhat
Products
Libsolv Enterprise Linux Satellite and 1 more
CVE-2021-33930

libsolv: heap-based buffer overflow in pool_installable_whatprovides() in src/repo.h

Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Opensuse Redhat
Products
Libsolv Enterprise Linux Satellite and 1 more
CVE-2021-33929

libsolv: heap-based buffer overflow in pool_disabled_solvable() in src/repo.h

Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Opensuse Redhat
Products
Libsolv Enterprise Linux Satellite and 1 more
CVE-2021-33928

libsolv: heap-based buffer overflow in pool_installable() in src/repo.h

Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Opensuse Redhat
Products
Libsolv Enterprise Linux Satellite and 1 more
CVE-2021-33571

django: Possible indeterminate SSRF, RFI, and LFI attacks since validators accepted leading zeros in IPv4 addresses

In Django 2.2 before 2.2.24, 3.x before 3.1.12, and 3.2 before 3.2.4, URLValidator, validate_ipv4_address, and validate_ipv46_address do not prohibit leading zero characters in octal literals. This may allow a bypass of access control that is based on IP addresses. (validate_ipv4_address and validate_ipv46_address are unaffected with Python 3.9.5+..) .

CVSS 3.1 · 7.5 High EPSS 5.3% KEV · Not listed
Vendors
Djangoproject Fedoraproject Redhat
Products
Django Fedora Openstack and 2 more
CVE-2021-33503

python-urllib3: ReDoS in the parsing of authority part of URL

An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.

CVSS 3.1 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Fedoraproject Oracle Python and 1 more
Products
Fedora Enterprise Manager Ops Center Instantis Enterprisetrack and 7 more
CVE-2021-33203

django: Potential directory traversal via ``admindocs``

Django before 2.2.24, 3.x before 3.1.12, and 3.2.x before 3.2.4 has a potential directory traversal via django.contrib.admindocs. Staff members could use the TemplateDetailView view to check the existence of arbitrary files. Additionally, if (and only if) the default admindocs templates have been customized by application developers to also show file contents, then not only the existence but also the file contents would have been exposed. In other words, there is directory traversal outside of the template root directories.

CVSS 3.1 · 4.9 Medium EPSS 2.7% KEV · Not listed
Vendors
Djangoproject Fedoraproject Redhat
Products
Django Fedora Openstack and 2 more
CVE-2021-31542

django: Potential directory-traversal via uploaded files

In Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1, MultiPartParser, UploadedFile, and FieldFile allowed directory traversal via uploaded files with suitably crafted file names.

CVSS 3.1 · 7.5 High EPSS 5.3% KEV · Not listed
Vendors
Debian Djangoproject Fedoraproject and 1 more
Products
Debian Linux Django Fedora and 3 more
CVE-2021-28658

django: potential directory-traversal via uploaded files

In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names. Built-in upload handlers were not affected by this vulnerability.

CVSS 3.1 · 5.3 Medium EPSS 3.8% KEV · Not listed
Vendors
Debian Djangoproject Fedoraproject and 1 more
Products
Debian Linux Django Fedora and 3 more
CVE-2021-27025

puppet: silent configuration failure in agent

A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Fedoraproject Puppet Redhat
Products
Fedora Puppet Puppet Agent and 5 more
CVE-2021-21330

Open redirect vulnerability in aiohttp

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website. It is caused by a bug in the `aiohttp.web_middlewares.normalize_path_middleware` middleware. This security problem has been fixed in 3.7.4. Upgrade your dependency using pip as follows "pip install aiohttp >= 3.7.4". If upgrading is not an option for you, a workaround can be to avoid using `aiohttp.web_middlewares.normalize_path_middleware` in your applications.

CVSS 3.1 · 3.1 Low EPSS 1.9% KEV · Not listed
Vendors
Aiohttp Debian Fedoraproject and 1 more
Products
Aiohttp Debian Linux Fedora and 2 more
CVE-2021-20256

Satellite: BMC controller credential leak via API

A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Satellite Satellite Capsule
CVE-2020-9402

django: potential SQL injection via "tolerance" parameter in GIS functions and aggregates on Oracle

Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a suitably crafted tolerance to GIS functions and aggregates on Oracle, it was possible to break escaping and inject malicious SQL.

CVSS 3.1 · 8.8 High EPSS 24.0% KEV · Not listed
Vendors
Canonical Debian Djangoproject and 3 more
Products
Ubuntu Linux Debian Linux Django and 4 more
CVE-2020-8184

rubygem-rack: percent-encoded cookies can be used to overwrite existing prefixed cookie names

A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.

CVSS 3.1 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Canonical Debian Rack Project and 1 more
Products
Ubuntu Linux Debian Linux Rack and 2 more