rubygem-foreman_remote_execution-cockpit vulnerabilities (Red Hat)
70 vulnerabilities.
rubygem-foreman_remote_execution-cockpitRed HatDjango Path Traversal vulnerability4.3 Mediumrubygem-foreman_remote_execution-cockpitRed HatDjango vulnerable to user enumeration attack5.3 Mediumrubygem-foreman_remote_execution-cockpitRed HatDjango vulnerable to Denial of Service7.5 Highrubygem-foreman_remote_execution-cockpitRed HatDenial of Service via crafted zip file in jaraco/zipp6.2 Mediumrubygem-foreman_remote_execution-cockpitRed HatProxy-Authorization request header isn't stripped during cross-origin redirects in urllib34.4 Mediumrubygem-foreman_remote_execution-cockpitRed HatRequests `Session` object does not verify requests after making first request with verify=False5.6 Mediumrubygem-foreman_remote_execution-cockpitRed HatForeman: host ssh key not being checked in remote execution6.8 Mediumrubygem-foreman_remote_execution-cockpitRed HatRegular Expression Denial of Service in micromatch5.3 Mediumrubygem-foreman_remote_execution-cockpitRed Hatnode-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation6.5 Mediumrubygem-foreman_remote_execution-cockpitRed HatRequest body not stripped after redirect in urllib34.2 Mediumrubygem-foreman_remote_execution-cockpitRed HatForeman: world readable file containing secrets6.7 Mediumrubygem-foreman_remote_execution-cockpitRed Hat`Cookie` HTTP header isn't stripped on cross-origin redirects5.9 Mediumrubygem-foreman_remote_execution-cockpitRed HatGitPython blind local file inclusion4.0 Mediumrubygem-foreman_remote_execution-cockpitRed HatActionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to4.0 Mediumrubygem-foreman_remote_execution-cockpitRed Hatjackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode7.5 Highrubygem-foreman_remote_execution-cockpitRed HatResource exhaustion in Django7.5 Highrubygem-foreman_remote_execution-cockpitRed HatDjango contains Uncontrolled Resource Consumption via cached header7.5 Highrubygem-foreman_remote_execution-cockpitRed Hatrails-html-sanitizer contains an incomplete fix for an XSS vulnerability6.1 Mediumrubygem-foreman_remote_execution-cockpitRed HatPossible XSS vulnerability with certain configurations of rails-html-sanitizer7.2 Highrubygem-foreman_remote_execution-cockpitRed HatImproper neutralization of data URIs allows XSS in rails-html-sanitizer6.1 Mediumrubygem-foreman_remote_execution-cockpitRed HatInefficient Regular Expression Complexity in rails-html-sanitizer7.5 Highrubygem-foreman_remote_execution-cockpitRed HatUncontrolled Recursion in Loofah7.5 Highrubygem-foreman_remote_execution-cockpitRed HatImproper neutralization of data URIs may allow XSS in Loofah6.1 Mediumrubygem-foreman_remote_execution-cockpitRed HatInefficient Regular Expression Complexity in Loofah7.5 Highrubygem-foreman_remote_execution-cockpitRed HatRemote Code execution in SnakeYAML8.3 Highrubygem-foreman_remote_execution-cockpitRed HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Mediumrubygem-foreman_remote_execution-cockpitRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticalrubygem-foreman_remote_execution-cockpitRed HatDjango denial-of-service vulnerability in internationalized URLs7.5 Highrubygem-foreman_remote_execution-cockpitRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Highrubygem-foreman_remote_execution-cockpitRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Highrubygem-foreman_remote_execution-cockpitRed HatDoS in SnakeYAML6.5 Mediumrubygem-foreman_remote_execution-cockpitRed HatDoS in SnakeYAML6.5 Mediumrubygem-foreman_remote_execution-cockpitRed HatDoS in SnakeYAML6.5 Mediumrubygem-foreman_remote_execution-cockpitRed HatDoS in SnakeYAML6.5 Mediumrubygem-foreman_remote_execution-cockpitRed HatDenial of Service (DoS)7.5 Highrubygem-foreman_remote_execution-cockpitRed HatTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 Highrubygem-foreman_remote_execution-cockpitRed HatActive Record RCE bug with Serialized Columns9.8 Criticalrubygem-foreman_remote_execution-cockpitRed HatApache Commons Configuration insecure interpolation defaults9.8 Criticalrubygem-foreman_remote_execution-cockpitRed HatXSS Vulnerability in Action View tag helpers6.1 Mediumrubygem-foreman_remote_execution-cockpitRed HatCross-site Scripting Vulnerability in Action Pack6.1 Medium