puppetserver vulnerabilities (Red Hat)
196 vulnerabilities.
puppetserverRed HatDjango bypasses validation when using one form field to upload multiple files9.8 CriticalpuppetserverRed HatAudited Log Integrity Errors Due to Race Condition3.1 LowpuppetserverRed HatParser contains an inefficient regular expression in sqlparse5.5 MediumpuppetserverRed HatCookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty2.4 LowpuppetserverRed Hatjackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode7.5 HighpuppetserverRed HatPossible Denial of Service Vulnerability in Rack's header parsing5.3 MediumpuppetserverRed HatRack has possible DoS Vulnerability in Multipart MIME parsing7.5 HighpuppetserverRed HatResource exhaustion in Django7.5 HighpuppetserverRed HatDjango contains Uncontrolled Resource Consumption via cached header7.5 HighpuppetserverRed HatDenial of Service Vulnerability in Rack Content-Disposition parsing7.5 HighpuppetserverRed HatReDoS based DoS vulnerability in Action Dispatch7.5 HighpuppetserverRed HatReDoS based DoS vulnerability in Active Support's underscore7.5 HighpuppetserverRed HatDenial of Service Vulnerability in ActiveRecord's PostgreSQL adapter7.5 HighpuppetserverRed HatReDoS based DoS vulnerability in Action Dispatch7.5 HighpuppetserverRed HatSQL Injection Vulnerability via ActiveRecord comments8.8 HighpuppetserverRed HatDenial of service via header parsing in Rack7.5 HighpuppetserverRed HatDenial of service via multipart parsing in Rack7.5 HighpuppetserverRed HatReDoS based DoS vulnerability in GlobalID7.5 HighpuppetserverRed HatCode injection in ruby git8.0 HighpuppetserverRed Hatruby-git has potential remote code execution vulnerability8.0 HighpuppetserverRed HatPython Charmers Future denial of service vulnerability7.5 HighpuppetserverRed HatA blind site-to-site request forgery vulnerability was found in Satellite server. It is possible...4.5 MediumpuppetserverRed Hatrails-html-sanitizer contains an incomplete fix for an XSS vulnerability6.1 MediumpuppetserverRed HatPossible XSS vulnerability with certain configurations of rails-html-sanitizer7.2 HighpuppetserverRed HatImproper neutralization of data URIs allows XSS in rails-html-sanitizer6.1 MediumpuppetserverRed HatInefficient Regular Expression Complexity in rails-html-sanitizer7.5 HighpuppetserverRed HatUncontrolled Recursion in Loofah7.5 HighpuppetserverRed HatImproper neutralization of data URIs may allow XSS in Loofah6.1 MediumpuppetserverRed HatInefficient Regular Expression Complexity in Loofah7.5 HighpuppetserverRed HatExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumpuppetserverRed HatRemote Code execution in SnakeYAML8.3 HighpuppetserverRed HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 MediumpuppetserverRed HatPlaintext storage of tokens in pulp_ansible5.5 MediumpuppetserverRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 CriticalpuppetserverRed HatDjango denial-of-service vulnerability in internationalized URLs7.5 HighpuppetserverRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 HighpuppetserverRed HatUncontrolled Resource Consumption in Jackson-databind7.5 HighpuppetserverRed HatDoS in SnakeYAML6.5 MediumpuppetserverRed HatDoS in SnakeYAML6.5 MediumpuppetserverRed HatDoS in SnakeYAML6.5 MediumpuppetserverRed HatDoS in SnakeYAML6.5 MediumpuppetserverRed HatDenial of Service (DoS)7.5 HighpuppetserverRed HatTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 HighpuppetserverRed HatActive Record RCE bug with Serialized Columns9.8 CriticalpuppetserverRed HatApache Commons Configuration insecure interpolation defaults9.8 CriticalpuppetserverRed HatThe c_rehash script allows command injection7.3 HighpuppetserverRed HatThe c_rehash script allows command injection7.3 HighpuppetserverRed HatXSS Vulnerability in Action View tag helpers6.1 MediumpuppetserverRed HatCross-site Scripting Vulnerability in Action Pack6.1 MediumpuppetserverRed HatImproper Certificate Validation in kubeclient8.1 High- Show moreLoading…