puppetserver vulnerabilities (Red Hat)
196 vulnerabilities.
puppetserverRed HatJinja2 sandbox escape via string formatting8.6 HighpuppetserverRed Hatkatello Cross-site Scripting vulnerability5.4 MediumpuppetserverRed HatA cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker...7.6 HighpuppetserverRed HatRack vulnerable to Denial of Service7.5 HighpuppetserverRed HatImproper Privilege Management in MySQL Connectors Java8.8 HighpuppetserverRed HatA flaw was found in foreman from versions 1.18. A stored cross-site scripting vulnerability...5.4 MediumpuppetserverRed Hatkatello Improper Privilege Management vulnerability4.3 MediumpuppetserverRed HatDom4j contains a XML Injection vulnerability7.5 HighpuppetserverRed HatWithdrawn Advisory: Pulp Improper Path Parsing6.8 MediumpuppetserverRed HatRed Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering...3.5 LowpuppetserverRed HatIn Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and...5.5 MediumpuppetserverRed HatIn Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode7.4 HighpuppetserverRed HatIn Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode7.4 HighpuppetserverRed HatThe Bouncy Castle JCE Provider carry a propagation bug7.5 HighpuppetserverRed HatIn Bouncy Castle JCE Provider the other party DH public key is not fully validated3.7 LowpuppetserverRed HatModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 MediumpuppetserverRed HatIn Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values7.5 HighpuppetserverRed HatIn Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification7.5 HighpuppetserverRed HatModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 MediumpuppetserverRed HatModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.3 MediumpuppetserverRed HatIn Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate7.5 HighpuppetserverRed HatDenial of Service in Google Guava5.9 MediumpuppetserverRed HatBouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions4.4 MediumpuppetserverRed HatAn input sanitization flaw was found in the id field in the dashboard controller of Foreman...6.5 MediumpuppetserverRed HatA flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for...8.8 HighpuppetserverRed Hatrack-protection gem timing attack vulnerability when validating CSRF token5.9 MediumpuppetserverRed HatDjango Denial-of-service possibility in truncatechars_html and truncatewords_html template filters5.3 MediumpuppetserverRed HatDjango denial-of-service possibility in urlize and urlizetrunc template filters5.3 MediumpuppetserverRed HatIn previous versions of Puppet Agent it was possible for the agent to retrieve facts from an...6.5 MediumpuppetserverRed HatDjango vulnerable to information leakage in AuthenticationForm7.5 HighpuppetserverRed HatPrivilege Escalation in Hibernate Validator7.0 HighpuppetserverRed HatTarball permission preservation in puppet5.5 MediumpuppetserverRed Hatnet-ldap Improper Certificate Validation vulnerability5.9 MediumpuppetserverRed HatAn attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on...6.1 MediumpuppetserverRed Hatjackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution9.8 CriticalpuppetserverRed HatPallets Werkzeug cross-site scripting vulnerability6.1 MediumpuppetserverRed HatWithdrawn Advisory: Improper Restriction of XML External Entity Reference in Apache ActiveMQ9.8 CriticalpuppetserverRed HatDjango open redirect and possible XSS attack via user-supplied numeric redirect URLs6.1 MediumpuppetserverRed HatQOS.ch Logback vulnerable to Deserialization of Untrusted Data9.8 CriticalpuppetserverRed HatDenial of service in JBoss resteasy7.5 HighpuppetserverRed HatModerate severity vulnerability that affects org.apache.qpid:proton-j6.5 MediumpuppetserverRed HatBouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain...3.3 LowpuppetserverRed HatRack vulnerable to Denial of Service via large parameter depth request5.0 MediumpuppetserverRed Hatrest-client Gem Vulnerable to Session Fixation9.8 CriticalpuppetserverRed Hatrest-client allows local users to obtain sensitive information by reading the log2.1 LowpuppetserverRed HatMultiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome...7.5 High