puppet-agent vulnerabilities (Red Hat)
187 vulnerabilities.
-
puppet-agentRed Hat cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer... 9.8 Critical -
puppet-agentRed Hat Django is subject to SQL injection through its column aliases 7.1 High -
puppet-agentRed Hat Foreman: read-only access to entire db from templates 6.3 Medium -
puppet-agentRed Hat Rexml: rexml: denial of service via inefficient regex parsing 7.5 High -
puppet-agentRed Hat REXML ReDoS vulnerability 6.6 Medium -
puppet-agentRed Hat Memory leak 7.2 High -
puppet-agentRed Hat Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore 9.8 Critical -
puppet-agentRed Hat Puppet-foreman: an authentication bypass vulnerability exists in foreman 9.8 Critical -
puppet-agentRed Hat Django SQL injection vulnerability 7.3 High -
puppet-agentRed Hat HPACK table poisoning in gRPC C++, Python & Ruby 6.3 Medium -
puppet-agentRed Hat Django vulnerable to Denial of Service 7.5 High -
puppet-agentRed Hat Django Path Traversal vulnerability 4.3 Medium -
puppet-agentRed Hat Django vulnerable to user enumeration attack 5.3 Medium -
puppet-agentRed Hat Django vulnerable to Denial of Service 7.5 High -
puppet-agentRed Hat Denial of Service via crafted zip file in jaraco/zipp 6.2 Medium -
puppet-agentRed Hat Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3 4.4 Medium -
puppet-agentRed Hat Regular Expression Denial of Service in micromatch 5.3 Medium -
puppet-agentRed Hat node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation 6.5 Medium -
puppet-agentRed Hat HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
puppet-agentRed Hat This flaw allows an attacker to insert cookies at will into a running program using libcurl, if... 3.7 Low -
puppet-agentRed Hat This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is... 9.8 Critical -
puppet-agentRed Hat Os command injection via ct_command and fcct_command 8.0 High -
puppet-agentRed Hat Arbitrary code execution through yaml global parameters 8.0 High -
puppet-agentRed Hat Foreman: arbitrary code execution through templates 9.1 Critical -
puppet-agentRed Hat sidekiq Denial of Service vulnerability 7.5 High -
puppet-agentRed Hat Denial of Service in gRPC Core 7.5 High -
puppet-agentRed Hat Foreman: stored cross-site scripting in host tab 5.4 Medium -
puppet-agentRed Hat In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that... 5.8 Medium -
puppet-agentRed Hat The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be... 7.5 High -
puppet-agentRed Hat In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will... 5.8 Medium -
puppet-agentRed Hat Inconsistent Interpretation of HTTP Requests in puma 7.3 High -
puppet-agentRed Hat Excessive time spent checking DH q parameter value 5.3 Medium -
puppet-agentRed Hat GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments 9.8 Critical -
puppet-agentRed Hat Insufficient sanitization of Host header in net/http 6.5 Medium -
puppet-agentRed Hat Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
puppet-agentRed Hat Jetty accepts "+" prefixed value in Content-Length 5.3 Medium -
puppet-agentRed Hat Jetty vulnerable to errant command quoting in CGI Servlet 3.5 Low -
puppet-agentRed Hat Django has regular expression denial of service vulnerability in EmailValidator/URLValidator 7.5 High -
puppet-agentRed Hat Unintended leak of Proxy-Authorization header in requests 6.1 Medium -
puppet-agentRed Hat A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2... 5.3 Medium -
puppet-agentRed Hat Django bypasses validation when using one form field to upload multiple files 9.8 Critical -
puppet-agentRed Hat Parser contains an inefficient regular expression in sqlparse 5.5 Medium -
puppet-agentRed Hat Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty 2.4 Low -
puppet-agentRed Hat jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode 7.5 High -
puppet-agentRed Hat Possible Denial of Service Vulnerability in Rack's header parsing 5.3 Medium -
puppet-agentRed Hat Rack has possible DoS Vulnerability in Multipart MIME parsing 7.5 High -
puppet-agentRed Hat Resource exhaustion in Django 7.5 High -
puppet-agentRed Hat Django contains Uncontrolled Resource Consumption via cached header 7.5 High -
puppet-agentRed Hat Denial of Service Vulnerability in Rack Content-Disposition parsing 7.5 High -
puppet-agentRed Hat ReDoS based DoS vulnerability in Action Dispatch 7.5 High - Show olderLoading…