pulp vulnerabilities (Red Hat)
136 vulnerabilities.
pulpRed HatWithdrawn Advisory: Improper Restriction of XML External Entity Reference in Apache ActiveMQ9.8 CriticalpulpRed Hatdiscovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes...7.0 HighpulpRed HatForeman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the...8.1 HighpulpRed HatPulp before 2.8.5 uses bash's $RANDOM in an unsafe way to generate passwords.7.5 HighpulpRed HatThe pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key.5.5 MediumpulpRed Hatclient/consumer/cli.py in Pulp before 2.8.3 writes consumer private keys to etc/pki/pulp/consumer...7.5 HighpulpRed Hatpulp.spec in the installation process for Pulp 2.8.3 generates the RSA key pairs used to validate...5.5 MediumpulpRed HatThe pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or...7.1 HighpulpRed HatThe Node certificate in Pulp before 2.8.3 contains the private key, and is stored in a world...5.5 MediumpulpRed HatVersions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the...8.2 HighpulpRed HatDjango open redirect and possible XSS attack via user-supplied numeric redirect URLs6.1 MediumpulpRed HatQOS.ch Logback vulnerable to Deserialization of Untrusted Data9.8 CriticalpulpRed HatDenial of service in JBoss resteasy7.5 HighpulpRed HatCross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2,...6.1 MediumpulpRed HatForeman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview...5.3 MediumpulpRed HatThe (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1...8.8 HighpulpRed HatThe (1) Organization and (2) Locations APIs in Foreman before 1.11.3 and 1.12.x before 1.12.0-RC1...5.0 MediumpulpRed HatForced Browsing in Twisted5.3 MediumpulpRed HatEval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman...8.8 HighpulpRed Hatsafemode gem allows context-dependent attackers to obtain sensitive information via the inspect method8.1 HighpulpRed HatThe Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before...8.8 HighpulpRed HatBouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain...3.3 LowpulpRed HatMultiple cross-site scripting (XSS) vulnerabilities in information popups in Foreman before 1.10...4.3 MediumpulpRed HatForeman before 1.9.0 allows remote authenticated users with the edit_users permission to edit...6.0 MediumpulpRed HatForeman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,...5.0 MediumpulpRed HatForeman before 1.7.5 allows remote authenticated users to bypass organization and location...4.0 MediumpulpRed HatForman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in...5.0 MediumpulpRed HatCross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1...4.3 MediumpulpRed Hatrest-client Gem Vulnerable to Session Fixation9.8 CriticalpulpRed Hatrest-client allows local users to obtain sensitive information by reading the log2.1 LowpulpRed HatSmart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2...7.5 HighpulpRed HatSimpleGeo python-oauth2 does not check the nonce allowing replay attacks4.3 MediumpulpRed Hatwill_paginate Cross-site Scripting vulnerability4.3 MediumpulpRed HatSimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces5.8 MediumpulpRed HatThe SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic...3.4 LowpulpRed HatApache Tomcat affected by vulnerability in TLS and SSL protocol5.8 Medium