katello-common vulnerabilities (Red Hat)
172 vulnerabilities.
katello-commonRed HatQOS.ch Logback vulnerable to Deserialization of Untrusted Data9.8 Criticalkatello-commonRed HatDenial of service in JBoss resteasy7.5 Highkatello-commonRed HatCross-site scripting (XSS) vulnerability in app/assets/javascripts/host_edit_interfaces.js in...5.4 Mediumkatello-commonRed HatCross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2,...6.1 Mediumkatello-commonRed HatForeman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview...5.3 Mediumkatello-commonRed HatThe (1) Organization and (2) Locations APIs in Foreman before 1.11.3 and 1.12.x before 1.12.0-RC1...5.0 Mediumkatello-commonRed HatForced Browsing in Twisted5.3 Mediumkatello-commonRed HatEval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman...8.8 Highkatello-commonRed Hatsafemode gem allows context-dependent attackers to obtain sensitive information via the inspect method8.1 Highkatello-commonRed HatThe Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before...8.8 Highkatello-commonRed HatBouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain...3.3 Lowkatello-commonRed HatForeman before 1.9.0 allows remote authenticated users with the edit_users permission to edit...6.0 Mediumkatello-commonRed HatForeman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,...5.0 Mediumkatello-commonRed HatForeman before 1.7.5 allows remote authenticated users to bypass organization and location...4.0 Mediumkatello-commonRed HatForman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in...5.0 Mediumkatello-commonRed HatCross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1...4.3 Mediumkatello-commonRed Hatrest-client Gem Vulnerable to Session Fixation9.8 Criticalkatello-commonRed Hatrest-client allows local users to obtain sensitive information by reading the log2.1 Lowkatello-commonRed HatSimpleGeo python-oauth2 does not check the nonce allowing replay attacks4.3 Mediumkatello-commonRed Hatwill_paginate Cross-site Scripting vulnerability4.3 Mediumkatello-commonRed HatSimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces5.8 Mediumkatello-commonRed HatApache Tomcat affected by vulnerability in TLS and SSL protocol5.8 Medium