gofer vulnerabilities (Red Hat)
112 vulnerabilities.
goferRed HatJinja2 sandbox escape via string formatting8.6 HighgoferRed Hatkatello Cross-site Scripting vulnerability5.4 MediumgoferRed HatA cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker...7.6 HighgoferRed HatRack vulnerable to Denial of Service7.5 HighgoferRed HatImproper Privilege Management in MySQL Connectors Java8.8 HighgoferRed HatA flaw was found in foreman from versions 1.18. A stored cross-site scripting vulnerability...5.4 MediumgoferRed Hatkatello Improper Privilege Management vulnerability4.3 MediumgoferRed HatDom4j contains a XML Injection vulnerability7.5 HighgoferRed HatWithdrawn Advisory: Pulp Improper Path Parsing6.8 MediumgoferRed HatRed Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering...3.5 LowgoferRed HatIn Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and...5.5 MediumgoferRed HatIn Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode7.4 HighgoferRed HatIn Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode7.4 HighgoferRed HatThe Bouncy Castle JCE Provider carry a propagation bug7.5 HighgoferRed HatIn Bouncy Castle JCE Provider the other party DH public key is not fully validated3.7 LowgoferRed HatModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 MediumgoferRed HatIn Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values7.5 HighgoferRed HatIn Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification7.5 HighgoferRed HatModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 MediumgoferRed HatModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.3 MediumgoferRed HatIn Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate7.5 HighgoferRed HatDenial of Service in Google Guava5.9 MediumgoferRed HatBouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions4.4 MediumgoferRed HatAn input sanitization flaw was found in the id field in the dashboard controller of Foreman...6.5 MediumgoferRed HatA flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for...8.8 HighgoferRed Hatrack-protection gem timing attack vulnerability when validating CSRF token5.9 MediumgoferRed HatDjango Denial-of-service possibility in truncatechars_html and truncatewords_html template filters5.3 MediumgoferRed HatDjango denial-of-service possibility in urlize and urlizetrunc template filters5.3 MediumgoferRed HatIn previous versions of Puppet Agent it was possible for the agent to retrieve facts from an...6.5 MediumgoferRed HatDjango vulnerable to information leakage in AuthenticationForm7.5 HighgoferRed HatPrivilege Escalation in Hibernate Validator7.0 HighgoferRed HatTarball permission preservation in puppet5.5 MediumgoferRed Hatnet-ldap Improper Certificate Validation vulnerability5.9 MediumgoferRed HatAn attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on...6.1 MediumgoferRed Hatjackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution9.8 CriticalgoferRed HatPallets Werkzeug cross-site scripting vulnerability6.1 MediumgoferRed HatCross-site scripting (XSS) vulnerability in Foreman 1.7.0 and after.6.1 MediumgoferRed HatWithdrawn Advisory: Improper Restriction of XML External Entity Reference in Apache ActiveMQ9.8 CriticalgoferRed HatForeman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the...8.1 HighgoferRed Hatclient/consumer/cli.py in Pulp before 2.8.3 writes consumer private keys to etc/pki/pulp/consumer...7.5 HighgoferRed Hatpulp.spec in the installation process for Pulp 2.8.3 generates the RSA key pairs used to validate...5.5 MediumgoferRed HatThe pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or...7.1 HighgoferRed HatThe Node certificate in Pulp before 2.8.3 contains the private key, and is stored in a world...5.5 MediumgoferRed HatDjango open redirect and possible XSS attack via user-supplied numeric redirect URLs6.1 MediumgoferRed HatQOS.ch Logback vulnerable to Deserialization of Untrusted Data9.8 CriticalgoferRed HatDenial of service in JBoss resteasy7.5 HighgoferRed HatEval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman...8.8 HighgoferRed HatModerate severity vulnerability that affects org.apache.qpid:proton-j6.5 MediumgoferRed HatForeman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which...4.2 MediumgoferRed HatBouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain...3.3 Low- Show moreLoading…