Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 329

Export CSV
CVE-2017-7233

python-django: Open redirect and possible XSS attack via user-supplied numeric redirect URLs

Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The security check for these redirects (namely ``django.utils.http.is_safe_url()``) considered some numeric URLs "safe" when they shouldn't be, aka an open redirect vulnerability. Also, if a developer relies on ``is_safe_url()`` to provide safe redirect targets and puts such a URL into a link, they could suffer from an XSS attack.

CVSS 3.0 · 6.1 Medium EPSS 2.4% KEV · Not listed
Vendors
Djangoproject Redhat
Products
Django Openstack Satellite and 1 more
CVE-2022-40899

python-future: remote attackers can cause denial of service via crafted Set-Cookie header from malicious web server

An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.

CVSS 3.1 · 7.5 High EPSS 1.9% KEV · Not listed
Vendors
Pythoncharmers Redhat
Products
Python-future Rhui Satellite and 1 more
CVE-2022-4130

satellite: Blind SSRF via Referer header

A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.

CVSS 3.1 · 4.5 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Satellite Satellite Capsule Satellite Utils
CVE-2013-4346

python-oauth2: _check_signature() ignores the nonce value when validating signed urls

The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL.

CVSS 2.0 · 4.3 Medium EPSS 2.4% KEV · Not listed
Vendors
Redhat Urbanairship
Products
Satellite Satellite Capsule Python-oauth2
CVE-2013-4347

python-oauth2: Uses poor PRNG in nonce

The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack.

CVSS 2.0 · 5.8 Medium EPSS 2.4% KEV · Not listed
Vendors
Redhat Urbanairship
Products
Satellite Satellite Capsule Python-oauth2
CVE-2012-6619

mongodb: memory over-read via incorrect BSON object length

The default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote authenticated users to cause a denial of service (crash) or read system memory via a crafted BSON object in the column name in an insert command, which triggers a buffer over-read.

CVSS 2.0 · 6.4 Medium EPSS 3.9% KEV · Not listed
Vendors
Mongodb Redhat
Products
Mongodb Enterprise Mrg Openstack and 2 more
CVE-2016-3728

foreman: Missing input validation in Smart Proxy allows RCE via TFTP file variant parameter

Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman before 1.10.4 and 1.11.x before 1.11.2 allows remote attackers to execute arbitrary code via the PXE template type portion of the PATH_INFO to tftp/.

CVSS 3.0 · 8.8 High EPSS 2.8% KEV · Not listed
Vendors
Redhat Theforeman
Products
Satellite Satellite Capsule Foreman
CVE-2016-3693

foreman: inspect in a provisioning template exposes sensitive controller information

The Safemode gem before 1.2.4 for Ruby, when initialized with a delegate object that is a Rails controller, allows context-dependent attackers to obtain sensitive information via the inspect method.

CVSS 3.0 · 8.1 High EPSS 2.1% KEV · Not listed
Vendors
Redhat Safemode Project
Products
Satellite Satellite Capsule Safemode
CVE-2016-2166

qpid-proton: reactor sends messages in clear if ssl is requested but not available

The (1) proton.reactor.Connector, (2) proton.reactor.Container, and (3) proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors.

CVSS 3.0 · 6.5 Medium EPSS 4.3% KEV · Not listed
Vendors
Apache Fedoraproject Redhat
Products
Qpid Proton Fedora Satellite and 1 more
CVE-2015-5233

foreman: reports show/destroy not restricted by host authorization

Foreman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which allows (1) remote authenticated users with the view_reports permission to read reports from arbitrary hosts or (2) remote authenticated users with the destroy_reports permission to delete reports from arbitrary hosts via direct access to the (a) individual report show/delete pages or (b) APIs.

CVSS 3.0 · 4.2 Medium EPSS 1.2% KEV · Not listed
Vendors
Redhat Theforeman
Products
Satellite Satellite Capsule Foreman
CVE-2016-2100

foreman: Unprivileged user can access private bookmarks of other users

Foreman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read, modify, or delete private bookmarks by leveraging the (1) edit_bookmarks or (2) destroy_bookmarks permission.

CVSS 3.0 · 5.4 Medium EPSS 1.2% KEV · Not listed
Vendors
Redhat Theforeman
Products
Satellite Satellite Capsule Foreman
CVE-2016-1669

V8: integer overflow leading to buffer overflow in Zone::New

The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.

CVSS 3.1 · 8.8 High EPSS 4.3% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 8 more
CVE-2015-7518

foreman: Stored XSS vulnerability in smart class parameters/variables

Multiple cross-site scripting (XSS) vulnerabilities in information popups in Foreman before 1.10.0 allow remote attackers to inject arbitrary web script or HTML via (1) global parameters, (2) smart class parameters, or (3) smart variables in the (a) host or (b) hostgroup edit forms.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Redhat Theforeman
Products
Satellite Satellite Capsule Foreman
CVE-2013-6668

v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.146

Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome before 33.0.1750.146, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 5.6% KEV · Not listed
Vendors
Debian Google Nodejs and 1 more
Products
Debian Linux Chrome V8 and 4 more
CVE-2013-7440

python: wildcard matching rules do not follow RFC 6125

The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.

CVSS 3.0 · 5.9 Medium EPSS 1.9% KEV · Not listed
Vendors
Python Redhat
Products
Python Rhel Software Collections Satellite and 1 more
CVE-2014-0007

foreman-proxy: smart-proxy remote command injection

The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter to tftp/fetch_boot_file.

CVSS 2.0 · 7.5 High EPSS 9.0% KEV · Not listed
Vendors
Redhat Theforeman
Products
Openstack Satellite Satellite Capsule and 1 more
CVE-2014-0135

rubygem-kafo: temporary file creation vulnerability when creating /tmp/default_values.yaml

Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable permissions for default_values.yaml, which allows local users to obtain passwords and other sensitive information by reading the file.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Redhat Theforeman
Products
Satellite Satellite Capsule Kafo
CVE-2014-1704

v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.149

Multiple unspecified vulnerabilities in Google V8 before 3.23.17.18, as used in Google Chrome before 33.0.1750.149, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 2.0 · 10.0 Critical EPSS 1.5% KEV · Not listed
Vendors
Google Redhat
Products
Chrome V8 Rhel Software Collections and 2 more