foreman-debug vulnerabilities (Red Hat)
309 vulnerabilities.
foreman-debugRed HatCross-site scripting (XSS) vulnerability in app/assets/javascripts/host_edit_interfaces.js in...5.4 Mediumforeman-debugRed HatCross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2,...6.1 Mediumforeman-debugRed HatForeman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview...5.3 Mediumforeman-debugRed HatThe (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1...8.8 Highforeman-debugRed HatThe (1) Organization and (2) Locations APIs in Foreman before 1.11.3 and 1.12.x before 1.12.0-RC1...5.0 Mediumforeman-debugRed HatForced Browsing in Twisted5.3 Mediumforeman-debugRed HatEval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman...8.8 Highforeman-debugRed Hatsafemode gem allows context-dependent attackers to obtain sensitive information via the inspect method8.1 Highforeman-debugRed HatThe Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before...8.8 Highforeman-debugRed HatForeman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which...4.2 Mediumforeman-debugRed HatBouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain...3.3 Lowforeman-debugRed HatMultiple cross-site scripting (XSS) vulnerabilities in information popups in Foreman before 1.10...4.3 Mediumforeman-debugRed HatCRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94...4.3 Mediumforeman-debugRed HatForeman before 1.9.0 allows remote authenticated users with the edit_users permission to edit...6.0 Mediumforeman-debugRed HatForeman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,...5.0 Mediumforeman-debugRed HatForeman before 1.7.5 allows remote authenticated users to bypass organization and location...4.0 Mediumforeman-debugRed HatForman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in...5.0 Mediumforeman-debugRed HatCross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1...4.3 Mediumforeman-debugRed Hatrest-client Gem Vulnerable to Session Fixation9.8 Criticalforeman-debugRed Hatrest-client allows local users to obtain sensitive information by reading the log2.1 Lowforeman-debugRed HatSimpleGeo python-oauth2 does not check the nonce allowing replay attacks4.3 Mediumforeman-debugRed Hatwill_paginate Cross-site Scripting vulnerability4.3 Mediumforeman-debugRed HatSimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces5.8 Mediumforeman-debugRed HatApache Tomcat affected by vulnerability in TLS and SSL protocol5.8 Medium