cfme-debuginfo vulnerabilities (Red Hat)
97 vulnerabilities.
cfme-debuginfoRed HatIn postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7...7.0 Highcfme-debuginfoRed HatThe check_privileges method in vmdb/app/controllers/application_controller.rb in ManageIQ, as...8.8 Highcfme-debuginfoRed HatThe Erlang otp TLS server answers with different TLS alerts to different error types in the RSA...5.9 Mediumcfme-debuginfoRed HatIncorrect Default Permissions in Supervisor8.8 Highcfme-debuginfoRed HatManageIQ in CloudForms before 4.1 allows remote authenticated users to execute arbitrary code.8.8 Highcfme-debuginfoRed HatCloudForms Management Engine before 5.8 includes a default SSL/TLS certificate.7.5 Highcfme-debuginfoRed HatRed Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to...8.8 Highcfme-debuginfoRed HatThe web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code...8.8 Highcfme-debuginfoRed HatRed Hat CloudForms 3.2 Management Engine (CFME) 5.4.4 and CloudForms 4.0 Management Engine (CFME)...5.1 Mediumcfme-debuginfoRed HatNokogiri is vulnerable to XML External Entity (XXE) attack7.5 Highcfme-debuginfoRed Hatrest-client Gem Vulnerable to Session Fixation9.8 Criticalcfme-debuginfoRed Hatrest-client allows local users to obtain sensitive information by reading the log2.1 Lowcfme-debuginfoRed HatSQL injection vulnerability in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 allows remote...6.5 Mediumcfme-debuginfoRed HatThe customization template in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 uses a default...10.0 Highcfme-debuginfoRed Hatsprockets vulnerable to Path Traversal5.0 Mediumcfme-debuginfoRed HatThe (1) get and (2) log methods in the AgentController in Red Hat CloudForms 3.0 Management...5.0 Mediumcfme-debuginfoRed Hatvmdb/app/controllers/application_controller/performance.rb in Red Hat CloudForms 3.1 Management...6.5 Mediumcfme-debuginfoRed HatRed Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to...4.0 Mediumcfme-debuginfoRed Hatlib/util/miq-password.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 uses a...4.3 Mediumcfme-debuginfoRed HatThe (1) shell_exec function in lib/util/MiqSshUtilV1.rb and (2) temp_cmd_file function in lib...6.9 Mediumcfme-debuginfoRed HatRed Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 logs the root password when...4.9 Mediumcfme-debuginfoRed HatThe wait_for_task function in app/controllers/application_controller.rb in Red Hat CloudForms 3.0...5.0 Mediumcfme-debuginfoRed HatCross-site scripting (XSS) vulnerability in application/panel_control in CloudForms 3.0...4.3 Mediumcfme-debuginfoRed HatSQL injection vulnerability in the saved_report_delete action in the ReportController in Red Hat...6.5 Mediumcfme-debuginfoRed HatThe CatalogController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote...4.0 Mediumcfme-debuginfoRed Hatactionpack Path Traversal vulnerability7.5 Highcfme-debuginfoRed HatThe x_button method in the ServiceController (vmdb/app/controllers/service_controller.rb) in Red...7.5 Highcfme-debuginfoRed Hatactionpack Improper Input Validation vulnerability5.0 Mediumcfme-debuginfoRed HatRails vulnerable to Cross-site Scripting4.3 Mediumcfme-debuginfoRed HatMultiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x...6.5 Mediumcfme-debuginfoRed HatThe chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2...4.0 Mediumcfme-debuginfoRed HatMultiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12,...6.5 Mediumcfme-debuginfoRed HatMultiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8...6.5 Mediumcfme-debuginfoRed HatMultiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x...6.5 Mediumcfme-debuginfoRed HatRace condition in the (1) CREATE INDEX and (2) unspecified ALTER TABLE commands in PostgreSQL...4.9 Mediumcfme-debuginfoRed HatThe validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x...6.5 Mediumcfme-debuginfoRed HatPostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x...4.0 Mediumcfme-debuginfoRed HatCloudForms 3.0 Management Engine before 5.2.1.6 allows remote attackers to bypass the Ruby on...6.8 Mediumcfme-debuginfoRed HatSQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management...7.5 Highcfme-debuginfoRed Hatactionpack allows bypass of database-query restrictions6.4 Mediumcfme-debuginfoRed Hati18n gem Cross-site Scripting vulnerability4.3 Mediumcfme-debuginfoRed HatHeap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before...6.8 Mediumcfme-debuginfoRed Hatactionmailer email address processing causes Denial of service4.3 Mediumcfme-debuginfoRed HatThe Red Hat CloudForms Management Engine 5.1 allow remote administrators to execute arbitrary...8.5 Highcfme-debuginfoRed HatPostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION...4.0 Mediumcfme-debuginfoRed HatPostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17,...8.5 Highcfme-debuginfoRed HatArgument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x...6.5 Medium