candlepin vulnerabilities (Red Hat)
289 vulnerabilities.
candlepinRed HatDjango contains Uncontrolled Resource Consumption via cached header7.5 HighcandlepinRed Hatrails-html-sanitizer contains an incomplete fix for an XSS vulnerability6.1 MediumcandlepinRed HatPossible XSS vulnerability with certain configurations of rails-html-sanitizer7.2 HighcandlepinRed HatImproper neutralization of data URIs allows XSS in rails-html-sanitizer6.1 MediumcandlepinRed HatInefficient Regular Expression Complexity in rails-html-sanitizer7.5 HighcandlepinRed HatUncontrolled Recursion in Loofah7.5 HighcandlepinRed HatImproper neutralization of data URIs may allow XSS in Loofah6.1 MediumcandlepinRed HatInefficient Regular Expression Complexity in Loofah7.5 HighcandlepinRed HatRemote Code execution in SnakeYAML8.3 HighcandlepinRed HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 MediumcandlepinRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 CriticalcandlepinRed HatDjango denial-of-service vulnerability in internationalized URLs7.5 HighcandlepinRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 HighcandlepinRed HatUncontrolled Resource Consumption in Jackson-databind7.5 HighcandlepinRed HatDoS in SnakeYAML6.5 MediumcandlepinRed HatDoS in SnakeYAML6.5 MediumcandlepinRed HatDoS in SnakeYAML6.5 MediumcandlepinRed HatDoS in SnakeYAML6.5 MediumcandlepinRed HatDenial of Service (DoS)7.5 HighcandlepinRed HatTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 HighcandlepinRed HatActive Record RCE bug with Serialized Columns9.8 CriticalcandlepinRed HatApache Commons Configuration insecure interpolation defaults9.8 CriticalcandlepinRed HatThe Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few...5.5 MediumcandlepinRed HatDjango `Trunc()` and `Extract()` database functions vulnerable to SQL Injection9.8 CriticalcandlepinRed HatRails::Html::Sanitizer vulnerable to Cross-site Scripting6.1 MediumcandlepinRed HatImproper Handling of Unexpected Data Type in Nokogiri8.2 HighcandlepinRed Hatsinatra does not validate expanded path matches7.5 HighcandlepinRed HatXSS Vulnerability in Action View tag helpers6.1 MediumcandlepinRed HatCross-site Scripting Vulnerability in Action Pack6.1 MediumcandlepinRed HatCommand Injection8.1 HighcandlepinRed HatSQL Injection in Django9.8 CriticalcandlepinRed HatSQL Injection in Django9.8 CriticalcandlepinRed HatInefficient Regular Expression Complexity in Nokogiri7.5 HighcandlepinRed HatTwo heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the...6.5 MediumcandlepinRed HatInformation Exposure when using Puma with Rails8.0 HighcandlepinRed HatExposure of sensitive information in Action Pack7.4 HighcandlepinRed HatInfinite Loop in Django7.5 HighcandlepinRed HatCross-site Scripting in Django6.1 MediumcandlepinRed HatDenial of service in sidekiq7.5 HighcandlepinRed HatDirectory-traversal in Django5.3 MediumcandlepinRed HatInformation disclosure in Django7.5 HighcandlepinRed HatDenial-of-service in Django7.5 HighcandlepinRed HatA server side remote code execution vulnerability was found in Foreman project. A authenticated...7.2 HighcandlepinRed HatRCE from attacker with configuration edit priviledges through JNDI lookup6.6 MediumcandlepinRed HatHTML Cleaner allows crafted and SVG embedded scripts to pass through8.2 HighcandlepinRed HatHTTP fails to validate against control chars in header names which may lead to HTTP request smuggling6.5 MediumcandlepinRed HatPotential bypass of an upstream access control based on URL paths in Django7.3 HighcandlepinRed HatInconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma3.7 LowcandlepinRed HatRegular Expression Denial of Service in sqlparse7.5 HighcandlepinRed HatSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way7.5 High- Show moreLoading…