candlepin vulnerabilities (Red Hat)
289 vulnerabilities.
candlepinRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 HighcandlepinRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 HighcandlepinRed HatPossible XSS vulnerability in ActionView4.0 MediumcandlepinRed HatPuppet Server and PuppetDB provide useful performance and debugging information via their metrics...7.5 HighcandlepinRed HatSQL injection in Django8.8 HighcandlepinRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 CriticalcandlepinRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 CriticalcandlepinRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 CriticalcandlepinRed HatOS Command Injection in Rake6.4 MediumcandlepinRed HatImproper Certificate Validation in Puppet6.5 MediumcandlepinRed HatDeserialization of Untrusted Data in jackson-databind9.8 CriticalcandlepinRed HatHTTP Request Smuggling in Netty7.5 HighcandlepinRed HatLimited header injection when using dynamic overrides with user input in RubyGems secure_headers4.4 MediumcandlepinRed HatDirective injection when using dynamic overrides with user input in RubyGems secure_headers4.4 MediumcandlepinRed HatDeserialization of Untrusted Data in jackson-databind9.8 CriticalcandlepinRed HatVersions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token...6.5 MediumcandlepinRed HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 MediumcandlepinRed HatPrevious versions of Puppet Agent didn't verify the peer in the SSL connection prior to...5.4 MediumcandlepinRed HatKatello cleartext password storage issue4.1 MediumcandlepinRed HatDouble Free in psutil7.5 HighcandlepinRed HatThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 MediumcandlepinRed HatImproper Verification of Cryptographic Signature in Pure-Python ECDSA7.4 HighcandlepinRed HatDuplicate Advisory: possible DoS caused by malformed signature decoding in Pure-Python ECDSA3.7 LowcandlepinRed HatApache MINA SSLFilter security Issue7.5 HighcandlepinRed HatInsecure Deserialization in Apache Commons Beanutils7.3 HighcandlepinRed HatIt was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce...7.4 HighcandlepinRed HatAn authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously,...6.5 MediumcandlepinRed HatDjango Incorrect HTTP detection with reverse-proxy connecting via HTTPS5.3 MediumcandlepinRed HatTwisted CRLF Injection6.1 MediumcandlepinRed HatInformation exposure in FasterXML jackson-databind7.5 HighcandlepinRed HatIt was discovered that a world-readable log file belonging to Candlepin component of Red Hat...5.5 MediumcandlepinRed HatIn Foreman it was discovered that the delete compute resource operation, when executed from the...4.9 MediumcandlepinRed HatJinja2 sandbox escape vulnerability8.6 HighcandlepinRed HatJinja2 sandbox escape via string formatting8.6 HighcandlepinRed Hatkatello Cross-site Scripting vulnerability5.4 MediumcandlepinRed Hatkatello SQL Injection vulnerability4.3 MediumcandlepinRed HatA cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker...7.6 HighcandlepinRed HatRack vulnerable to Denial of Service7.5 HighcandlepinRed HatImproper Privilege Management in MySQL Connectors Java8.8 HighcandlepinRed HatA flaw was found in foreman from versions 1.18. A stored cross-site scripting vulnerability...5.4 MediumcandlepinRed Hatforeman before version 1.15.0 is vulnerable to an information leak through organizations and...4.3 MediumcandlepinRed Hatforeman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper...4.3 MediumcandlepinRed Hatkatello Improper Privilege Management vulnerability4.3 MediumcandlepinRed HatDom4j contains a XML Injection vulnerability7.5 HighcandlepinRed HatWithdrawn Advisory: Pulp Improper Path Parsing6.8 MediumcandlepinRed HatIt was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or...6.1 MediumcandlepinRed HatA vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman...6.1 MediumcandlepinRed HatA flaw was found in foreman 1.5.1. The remote execution plugin runs commands on hosts over SSH...6.4 MediumcandlepinRed HatA flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure...7.3 HighcandlepinRed HatRed Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering...3.5 Low- Show moreLoading…