Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 630

Export CSV
CVE-2012-6149

(spacewalk-java): XSS in system.addNote XML-RPC call due improper sanitization of note's subject and content

Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) subject or (2) content values of a note in a system.addNote XML-RPC call.

CVSS 2.0 · 3.5 Low EPSS 1.6% KEV · Not listed
Vendors
Redhat
Products
Network Satellite Satellite Satellite 5 Managed Db and 1 more
CVE-2013-2099

python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns

Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate.

CVSS 2.0 · 4.3 Medium EPSS 4.9% KEV · Not listed
Vendors
Canonical Python Redhat
Products
Ubuntu Linux Python Openstack and 5 more
CVE-2013-2121

Foreman: app/controllers/bookmarks_controller.rb remote code execution

Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary code via a controller name attribute.

CVSS 2.0 · 6.0 Medium EPSS 24.8% KEV · Not listed
Vendors
Redhat Theforeman
Products
Openstack Satellite Foreman
CVE-2013-2882

v8: remote DoS or unspecified other impact via type confusion

Google V8, as used in Google Chrome before 28.0.1500.95, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."

CVSS 2.0 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Debian Google Nodejs and 1 more
Products
Debian Linux Chrome Node.js and 3 more
CVE-2013-4180

Foreman: hosts_controller.rb power/ipmi_boot Symbol creation DoS

The (1) power and (2) ipmi_boot actions in the HostController in Foreman before 1.2.2 allow remote attackers to cause a denial of service (memory consumption) via unspecified input that is converted to a symbol.

CVSS 2.0 · 5.0 Medium EPSS 2.4% KEV · Not listed
Vendors
Redhat Theforeman
Products
Openstack Satellite Foreman
CVE-2013-4182

foreman: app/controllers/api/v1/hosts_controller.rb API privilege escalation

app/controllers/api/v1/hosts_controller.rb in Foreman before 1.2.2 does not properly restrict access to hosts, which allows remote attackers to access arbitrary hosts via an API request.

CVSS 2.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Redhat Theforeman
Products
Openstack Satellite Foreman
CVE-2013-4386

Foreman: host and host group parameter SQL injection

Multiple SQL injection vulnerabilities in app/models/concerns/host_common.rb in Foreman before 1.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) fqdn or (2) hostgroup parameter.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Redhat Theforeman
Products
Openstack Satellite Foreman
CVE-2013-4415

Spacewalk: PAGE_SIZE_LABEL_SELECTED cross-site scripting (XSS)

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) whereCriteria variable in a software channels search; (2) end_year, (3) start_hour, (4) end_am_pm, (5) end_day, (6) end_hour, (7) end_minute, (8) end_month, (9) end_year, (10) optionScanDateSearch, (11) result_filter, (12) search_string, (13) show_as, (14) start_am_pm, (15) start_day, (16) start_hour, (17) start_minute, (18) start_month, (19) start_year, or (20) whereToSearch variable in an scap audit results search; (21) end_minute, (22) end_month, (23) end_year, (24) errata_type_bug, (25) errata_type_enhancement, (26) errata_type_security, (27) fineGrained, (28) list_1892635924_sortdir, (29) optionIssueDateSearch, (30) start_am_pm, (31) start_day, (32) start_hour, (33) start_minute, (34) start_month, (35) start_year, or (36) view_mode variable in an errata search; or (37) fineGrained variable in a systems search, related to PAGE_SIZE_LABEL_SELECTED.

CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Redhat Suse
Products
Network Satellite Satellite Satellite 5 Managed Db and 3 more
CVE-2013-4480

Satellite: Interface to create the initial administrator user remains open after installation

Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a satellite, which allows remote attackers to create administrator accounts.

CVSS 2.0 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Redhat Suse
Products
Network Satellite Satellite Satellite With Embedded Oracle and 2 more
CVE-2013-6459

rubygem-will_paginate: XSS vulnerabilities

Cross-site scripting (XSS) vulnerability in the will_paginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links.

CVSS 3.0 · 4.3 Medium EPSS 2.2% KEV · Not listed
Vendors
Mislav Marohnic Redhat
Products
Will Paginate Satellite Satellite Capsule
CVE-2013-6639

v8: DoS (out-of-bounds write) in DehoistArrayIndex function in hydrogen.cc

The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via JavaScript code that sets the value of an array element with a crafted index.

CVSS 2.0 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
Google Redhat
Products
Chrome V8 Rhel Software Collections and 2 more
CVE-2013-6640

v8: DoS (out-of-bounds read) in DehoistArrayIndex function in hydrogen.cc

The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service (out-of-bounds read) via JavaScript code that sets a variable to the value of an array element with a crafted index.

CVSS 2.0 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
Google Redhat
Products
Chrome V8 Rhel Software Collections and 2 more
CVE-2013-6650

v8: incorrect handling of popular pages

The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors that trigger incorrect handling of "popular pages."

CVSS 2.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Debian Google Opensuse and 1 more
Products
Debian Linux Chrome Opensuse and 3 more
CVE-2022-46648

ruby-git: code injection vulnerability

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318.

CVSS 3.1 · 8 High EPSS 1.4% KEV · Not listed
Vendors
Debian Redhat Ruby-git Project
Products
Debian Linux Satellite Ruby-git
CVE-2022-47318

ruby-git: code injection vulnerability

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Debian Fedoraproject Redhat and 1 more
Products
Debian Linux Fedora Satellite and 1 more
CVE-2023-23969

python-django: Potential denial-of-service via Accept-Language headers

In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large.

CVSS 3.1 · 7.5 High EPSS 47.4% KEV · Not listed
Vendors
Debian Djangoproject Redhat
Products
Debian Linux Django Rhui and 2 more
CVE-2022-44566

rubygem-activerecord: Denial of Service

A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Activerecord Project Redhat
Products
Activerecord Satellite
CVE-2023-22792

rubygem-actionpack: Denial of Service in Action Dispatch

A regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1. Specially crafted cookies, in combination with a specially crafted X_FORWARDED_HOST header can cause the regular expression engine to enter a state of catastrophic backtracking. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability All users running an affected release should either upgrade or use one of the workarounds immediately.

CVSS 3.1 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Redhat Rubyonrails
Products
Satellite Rails
CVE-2023-24580

python-django: Potential denial-of-service vulnerability in file uploads

An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart forms could result in too many open files or memory exhaustion, and provided a potential vector for a denial-of-service attack.

CVSS 3.1 · 7.5 High EPSS 62.6% KEV · Not listed
Vendors
Debian Djangoproject Redhat
Products
Debian Linux Django Ansible Automation Platform and 3 more
CVE-2021-46877

jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode

jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Fasterxml Redhat
Products
Jackson-databind Amq Streams Camel Spring Boot and 12 more