mongodb vulnerabilities (Red Hat)
92 vulnerabilities.
mongodbRed HatForeman before 1.9.0 allows remote authenticated users with the edit_users permission to edit...6.0 MediummongodbRed HatForeman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,...5.0 MediummongodbRed HatForeman before 1.7.5 allows remote authenticated users to bypass organization and location...4.0 MediummongodbRed HatForman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in...5.0 MediummongodbRed HatCross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1...4.3 MediummongodbRed HatRack vulnerable to Denial of Service via large parameter depth request5.0 MediummongodbRed HatThe ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does...5.9 MediummongodbRed HatMongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service...5.0 MediummongodbRed HatUnspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass...5.0 MediummongodbRed HatRed Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows...7.5 HighmongodbRed HatRed Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number...2.1 LowmongodbRed Hatsimplejson before 2.6.1 vulnerable to array index error5.9 MediummongodbRed HatThe Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute...7.5 HighmongodbRed HatSimpleGeo python-oauth2 does not check the nonce allowing replay attacks4.3 MediummongodbRed HatForeman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews,...5.0 MediummongodbRed HatKafo allows local users to obtain passwords and other sensitive information by reading default_values.yaml1.9 LowmongodbRed HatSession fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web...6.8 MediummongodbRed HatCumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based...5.0 MediummongodbRed HatCross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before...4.3 MediummongodbRed HatMultiple unspecified vulnerabilities in Google V8 before 3.23.17.18, as used in Google Chrome...10.0 HighmongodbRed HatMultiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome...7.5 HighmongodbRed HatThe default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote...6.4 MediummongodbRed HatThe StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16,...7.5 HighmongodbRed HatThe DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22...7.5 HighmongodbRed HatThe DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22...7.5 HighmongodbRed HatMultiple SQL injection vulnerabilities in app/models/concerns/host_common.rb in Foreman before 1...7.5 HighmongodbRed HatSimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces5.8 MediummongodbRed HatMongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the...6.0 MediummongodbRed Hatapp/controllers/api/v1/hosts_controller.rb in Foreman before 1.2.2 does not properly restrict...7.5 HighmongodbRed HatThe (1) power and (2) ipmi_boot actions in the HostController in Foreman before 1.2.2 allow...5.0 MediummongodbRed HatEval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1...6.0 MediummongodbRed HatGoogle V8, as used in Google Chrome before 28.0.1500.95, allows remote attackers to cause a...7.5 HighmongodbRed HatUse of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo4.3 MediummongodbRed HatAlgorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,...4.3 MediummongodbRed HatThe lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin...3.6 LowmongodbRed HatJenkins allows attackers to obtain the master cryptographic key2.6 LowmongodbRed HatJenkins allows Cross-Site Scripting (XSS)3.5 LowmongodbRed HatJenkins affected by Open Redirect Vulnerability5.8 MediummongodbRed HatJenkins allows HTTP Injection and Response Splitting4.3 MediummongodbRed Hatrhc-chk.rb in Red Hat OpenShift Origin before 1.1, when -d (debug mode) is used, outputs the...2.1 LowmongodbRed HatActive Record contains SQL Injection7.5 HighmongodbRed HatApache Tomcat affected by vulnerability in TLS and SSL protocol5.8 Medium