ruby-shadow vulnerabilities (Red Hat)

22 vulnerabilities.

• ruby-shadow Red Hat Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token... CVE-2014-3590 Fix available 6.5 MediumJanuary 2, 2020
• ruby-shadow Red Hat The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a... CVE-2015-0203 Fix available 6.5 MediumFebruary 21, 2018
• ruby-shadow Red Hat qpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service ... CVE-2015-0224 Fix available EPSS 15.1% 7.5 HighOctober 30, 2017
• ruby-shadow Red Hat Foreman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read,... CVE-2016-2100 Fix available 5.4 MediumMay 20, 2016
• ruby-shadow Red Hat Moderate severity vulnerability that affects org.apache.qpid:proton-j CVE-2016-2166 Fix available 6.5 MediumApril 12, 2016
• ruby-shadow Red Hat CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94... CVE-2015-5245 Fix available 4.3 MediumDecember 3, 2015
• ruby-shadow Red Hat Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit... CVE-2015-3235 Fix available 6.0 MediumAugust 14, 2015
• ruby-shadow Red Hat Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,... CVE-2015-3155 Fix available 5.0 MediumAugust 14, 2015
• ruby-shadow Red Hat Foreman before 1.7.5 allows remote authenticated users to bypass organization and location... CVE-2015-1844 Fix available 4.0 MediumAugust 14, 2015
• ruby-shadow Red Hat Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in... CVE-2015-1816 Fix available 5.0 MediumAugust 14, 2015
• ruby-shadow Red Hat Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1... CVE-2014-3653 Fix available 4.3 MediumJuly 6, 2015
• ruby-shadow Red Hat Rack vulnerable to Denial of Service via large parameter depth request CVE-2015-3225 Fix available 5.0 MediumJune 26, 2015
• ruby-shadow Red Hat MongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service... CVE-2015-1609 Fix available 5.0 MediumMarch 20, 2015
• ruby-shadow Red Hat Unspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass... CVE-2015-0223 Fix available 5.0 MediumFebruary 2, 2015
• ruby-shadow Red Hat SimpleGeo python-oauth2 does not check the nonce allowing replay attacks CVE-2013-4346 Fix available 4.3 MediumMay 20, 2014
• ruby-shadow Red Hat Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome... CVE-2013-6668 Public exploitFix available 7.5 HighMarch 5, 2014
• ruby-shadow Red Hat SimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces CVE-2013-4347 Fix available 5.8 MediumOctober 25, 2013
• ruby-shadow Red Hat Puppet Module Tool (PMT), as used in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and... CVE-2013-4956 Fix available 3.6 LowAugust 20, 2013
• ruby-shadow Red Hat Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service CVE-2013-4761 Fix available 5.1 MediumAugust 20, 2013
• ruby-shadow Red Hat Puppet Improper Input Validation vulnerability CVE-2013-3567 Fix available 7.5 HighJune 26, 2013
• ruby-shadow Red Hat Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,... CVE-2013-2099 Fix available 4.3 MediumMay 16, 2013
• ruby-shadow Red Hat Apache Tomcat affected by vulnerability in TLS and SSL protocol CVE-2009-3555 Public exploitFix available EPSS 87.3% 5.8 MediumNovember 9, 2009