candlepin vulnerabilities (Red Hat)
289 vulnerabilities.
candlepinRed HatBzip2Decoder doesn't allow setting size restrictions for decompressed data7.5 HighcandlepinRed HatBuffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before...7.5 HighcandlepinRed HatBuffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv...7.5 HighcandlepinRed HatBuffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before...7.5 HighcandlepinRed HatBuffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17...7.5 HighcandlepinRed HatRegular Expression Denial of Service in Addressable templates7.5 HighcandlepinRed HatAn account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with...7.5 HighcandlepinRed HatA flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets...5.5 MediumcandlepinRed HatDjango Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks7.5 HighcandlepinRed HatPath Traversal in Django4.9 MediumcandlepinRed HatCatastrophic backtracking in URL authority parser when passed URL containing many @ characters7.5 HighcandlepinRed HatA flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not...6.5 MediumcandlepinRed HatBuffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool,...3.3 LowcandlepinRed HatKeepalive Connections Causing Denial Of Service in puma7.5 HighcandlepinRed HatPossible DoS Vulnerability in Action Controller Token Authentication7.5 HighcandlepinRed HatAction Pack contains Information Disclosure / Unintended Method Execution vulnerability7.5 HighcandlepinRed HatDenial of Service in Action Dispatch7.5 HighcandlepinRed HatPath Traversal in Django7.5 HighcandlepinRed HatA smart proxy that provides a restful API to various sub-systems of the Foreman is affected by...5.9 MediumcandlepinRed HatA flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0. A...6.3 MediumcandlepinRed HatDirectory Traversal in Django5.3 MediumcandlepinRed HatCross-site Scripting in Sidekiq6.1 MediumcandlepinRed HatPossible request smuggling in HTTP/2 due missing validation of content-length5.9 MediumcandlepinRed HatPossible request smuggling in HTTP/2 due missing validation5.9 MediumcandlepinRed HatActiverecord-session_store Vulnerable to Timing Attack5.3 MediumcandlepinRed HatOpen redirect vulnerability in aiohttp3.1 LowcandlepinRed HatA flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to...5.3 MediumcandlepinRed HatImproper Input Validation in PyYAML9.8 CriticalcandlepinRed HatLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files6.2 MediumcandlepinRed HatXXE in Nokogiri2.6 LowcandlepinRed HatTemp directory permission issue in Guava3.3 LowcandlepinRed HatGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 MediumcandlepinRed HatXSS in Action View5.4 MediumcandlepinRed HatA flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files....8.8 HighcandlepinRed HatUntrusted users can run pending migrations in production in Rails6.5 MediumcandlepinRed HatCSRF Vulnerability in rails-ujs6.5 MediumcandlepinRed HatRack allows Percent-encoded cookies to overwrite existing prefixed cookie names7.5 HighcandlepinRed HatDeserialization of untrusted data in Jackson Databind8.1 HighcandlepinRed HatDeserialization of untrusted data in Jackson Databind8.1 HighcandlepinRed HatDeserialization of untrusted data in Jackson Databind8.1 HighcandlepinRed HatDeserialization of untrusted data in Jackson Databind8.1 HighcandlepinRed HatRegular Expression Denial of Service in websocket-extensions (RubyGem)7.5 HighcandlepinRed HatAbility to forge per-form CSRF tokens in Rails4.3 MediumcandlepinRed HatCircumvention of file size limits in ActiveStorage7.5 HighcandlepinRed HatPossible Strong Parameters Bypass in ActionPack7.5 HighcandlepinRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 CriticalcandlepinRed HatDirectory traversal in Rack::Directory app bundled with Rack8.6 HighcandlepinRed HatImproper Input Validation in Hibernate Validator5.3 MediumcandlepinRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.1 HighcandlepinRed HatDenial of Service in Netty7.5 High- Show moreLoading…