libmongodb vulnerabilities (Red Hat)

51 vulnerabilities.

• libmongodb Red Hat The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a... CVE-2014-0234 9.8 CriticalFebruary 12, 2020
• libmongodb Red Hat The RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for... CVE-2013-4225 8.8 HighFebruary 11, 2020
• libmongodb Red Hat Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token... CVE-2014-3590 6.5 MediumJanuary 2, 2020
• libmongodb Red Hat A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic... CVE-2013-0196 Fix available 6.5 MediumDecember 30, 2019
• libmongodb Red Hat rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable CVE-2014-0241 5.5 MediumDecember 13, 2019
• libmongodb Red Hat mcollective has a default password set at install CVE-2014-0175 9.8 CriticalDecember 13, 2019
• libmongodb Red Hat Foreman has improper input validation which could lead to partial Denial of Service CVE-2014-0091 5.3 MediumDecember 11, 2019
• libmongodb Red Hat Katello has multiple XSS issues in various entities CVE-2013-2101 5.4 MediumDecember 3, 2019
• libmongodb Red Hat openshift-origin-node Improper Input Validation vulnerability CVE-2014-0084 5.5 MediumNovember 21, 2019
• libmongodb Red Hat Katello allows remote authenticated users to call the "system remove_deletion" CLI command via... CVE-2013-4201 4.3 MediumMay 1, 2018
• libmongodb Red Hat The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a... CVE-2015-0203 6.5 MediumFebruary 21, 2018
• libmongodb Red Hat qpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service ... CVE-2015-0224 EPSS 15.1% 7.5 HighOctober 30, 2017
• libmongodb Red Hat Multiple cross-site scripting (XSS) vulnerabilities in Foreman before 1.5.2 allow remote... CVE-2014-3531 5.4 MediumOctober 18, 2017
• libmongodb Red Hat Cross-site scripting (XSS) vulnerability in the search auto-completion functionality in Foreman... CVE-2014-0208 5.4 MediumOctober 16, 2017
• libmongodb Red Hat Foreman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read,... CVE-2016-2100 5.4 MediumMay 20, 2016
• libmongodb Red Hat Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit... CVE-2015-3235 6.0 MediumAugust 14, 2015
• libmongodb Red Hat Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,... CVE-2015-3155 5.0 MediumAugust 14, 2015
• libmongodb Red Hat Foreman before 1.7.5 allows remote authenticated users to bypass organization and location... CVE-2015-1844 4.0 MediumAugust 14, 2015
• libmongodb Red Hat Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in... CVE-2015-1816 5.0 MediumAugust 14, 2015
• libmongodb Red Hat Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1... CVE-2014-3653 4.3 MediumJuly 6, 2015
• libmongodb Red Hat The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does... CVE-2013-7440 Fix available 5.9 MediumJune 22, 2015
• libmongodb Red Hat MongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service... CVE-2015-1609 Fix available 5.0 MediumMarch 20, 2015
• libmongodb Red Hat Unspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass... CVE-2015-0223 5.0 MediumFebruary 2, 2015
• libmongodb Red Hat Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows... CVE-2014-3674 7.5 HighNovember 13, 2014
• libmongodb Red Hat Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number... CVE-2014-3602 2.1 LowNovember 13, 2014
• libmongodb Red Hat simplejson before 2.6.1 vulnerable to array index error CVE-2014-4616 Fix available 5.9 MediumJune 26, 2014
• libmongodb Red Hat The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute... CVE-2014-0007 Public exploitFix available 7.5 HighJune 20, 2014
• libmongodb Red Hat SimpleGeo python-oauth2 does not check the nonce allowing replay attacks CVE-2013-4346 Fix available 4.3 MediumMay 20, 2014
• libmongodb Red Hat Foreman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews,... CVE-2014-0192 5.0 MediumMay 8, 2014
• libmongodb Red Hat Kafo allows local users to obtain passwords and other sensitive information by reading default_values.yaml CVE-2014-0135 Fix available 1.9 LowMay 8, 2014
• libmongodb Red Hat Session fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web... CVE-2014-0090 6.8 MediumMay 8, 2014
• libmongodb Red Hat Cross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before... CVE-2014-0089 4.3 MediumMarch 27, 2014
• libmongodb Red Hat Multiple unspecified vulnerabilities in Google V8 before 3.23.17.18, as used in Google Chrome... CVE-2014-1704 Fix available 10.0 HighMarch 16, 2014
• libmongodb Red Hat The default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote... CVE-2012-6619 Fix available 6.4 MediumFebruary 17, 2014
• libmongodb Red Hat The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16,... CVE-2013-6650 Fix available 7.5 HighJanuary 28, 2014
• libmongodb Red Hat The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22... CVE-2013-6640 7.5 HighDecember 7, 2013
• libmongodb Red Hat The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22... CVE-2013-6639 7.5 HighDecember 7, 2013
• libmongodb Red Hat Multiple SQL injection vulnerabilities in app/models/concerns/host_common.rb in Foreman before 1... CVE-2013-4386 Fix available 7.5 HighNovember 19, 2013
• libmongodb Red Hat SimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces CVE-2013-4347 Fix available 5.8 MediumOctober 25, 2013
• libmongodb Red Hat app/controllers/api/v1/hosts_controller.rb in Foreman before 1.2.2 does not properly restrict... CVE-2013-4182 7.5 HighSeptember 16, 2013
• libmongodb Red Hat The (1) power and (2) ipmi_boot actions in the HostController in Foreman before 1.2.2 allow... CVE-2013-4180 5.0 MediumSeptember 16, 2013
• libmongodb Red Hat Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1... CVE-2013-2121 Public exploit EPSS 24.8% 6.0 MediumJuly 31, 2013
• libmongodb Red Hat Google V8, as used in Google Chrome before 28.0.1500.95, allows remote attackers to cause a... CVE-2013-2882 Fix available 7.5 HighJuly 30, 2013
• libmongodb Red Hat Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,... CVE-2013-2099 Fix available 4.3 MediumMay 16, 2013
• libmongodb Red Hat The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin... CVE-2013-0164 3.6 LowFebruary 24, 2013
• libmongodb Red Hat Jenkins allows attackers to obtain the master cryptographic key CVE-2013-0158 Fix available 2.6 LowFebruary 24, 2013
• libmongodb Red Hat Jenkins allows Cross-Site Scripting (XSS) CVE-2012-6074 Fix available 3.5 LowFebruary 24, 2013
• libmongodb Red Hat Jenkins affected by Open Redirect Vulnerability CVE-2012-6073 Fix available 5.8 MediumFebruary 24, 2013
• libmongodb Red Hat Jenkins allows HTTP Injection and Response Splitting CVE-2012-6072 Fix available 4.3 MediumFebruary 24, 2013
• libmongodb Red Hat rhc-chk.rb in Red Hat OpenShift Origin before 1.1, when -d (debug mode) is used, outputs the... CVE-2012-5658 2.1 LowFebruary 24, 2013
• Show olderLoading…