candlepin vulnerabilities (Red Hat)
289 vulnerabilities.
candlepinRed HatThe Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before...8.8 HighcandlepinRed HatBouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain...3.3 LowcandlepinRed HatMultiple cross-site scripting (XSS) vulnerabilities in information popups in Foreman before 1.10...4.3 MediumcandlepinRed HatForeman before 1.9.0 allows remote authenticated users with the edit_users permission to edit...6.0 MediumcandlepinRed HatForeman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,...5.0 MediumcandlepinRed HatForeman before 1.7.5 allows remote authenticated users to bypass organization and location...4.0 MediumcandlepinRed HatForman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in...5.0 MediumcandlepinRed HatCross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1...4.3 MediumcandlepinRed Hatrest-client Gem Vulnerable to Session Fixation9.8 CriticalcandlepinRed Hatrest-client allows local users to obtain sensitive information by reading the log2.1 LowcandlepinRed HatSimpleGeo python-oauth2 does not check the nonce allowing replay attacks4.3 MediumcandlepinRed Hatwill_paginate Cross-site Scripting vulnerability4.3 MediumcandlepinRed HatSimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces5.8 MediumcandlepinRed HatThe SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic...3.4 LowcandlepinRed HatApache Tomcat affected by vulnerability in TLS and SSL protocol5.8 Medium