rubygem-hammer_cli vulnerabilities (Red Hat)
50 vulnerabilities.
rubygem-hammer_cliRed HatDjango vulnerable to Denial of Service7.5 Highrubygem-hammer_cliRed HatDenial of Service via crafted zip file in jaraco/zipp6.2 Mediumrubygem-hammer_cliRed HatProxy-Authorization request header isn't stripped during cross-origin redirects in urllib34.4 Mediumrubygem-hammer_cliRed HatRegular Expression Denial of Service in micromatch5.3 Mediumrubygem-hammer_cliRed Hatnode-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation6.5 Mediumrubygem-hammer_cliRed Hatjackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode7.5 Highrubygem-hammer_cliRed HatResource exhaustion in Django7.5 Highrubygem-hammer_cliRed HatDjango contains Uncontrolled Resource Consumption via cached header7.5 Highrubygem-hammer_cliRed Hatrails-html-sanitizer contains an incomplete fix for an XSS vulnerability6.1 Mediumrubygem-hammer_cliRed HatPossible XSS vulnerability with certain configurations of rails-html-sanitizer7.2 Highrubygem-hammer_cliRed HatImproper neutralization of data URIs allows XSS in rails-html-sanitizer6.1 Mediumrubygem-hammer_cliRed HatInefficient Regular Expression Complexity in rails-html-sanitizer7.5 Highrubygem-hammer_cliRed HatUncontrolled Recursion in Loofah7.5 Highrubygem-hammer_cliRed HatImproper neutralization of data URIs may allow XSS in Loofah6.1 Mediumrubygem-hammer_cliRed HatInefficient Regular Expression Complexity in Loofah7.5 Highrubygem-hammer_cliRed HatRemote Code execution in SnakeYAML8.3 Highrubygem-hammer_cliRed HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Mediumrubygem-hammer_cliRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticalrubygem-hammer_cliRed HatDjango denial-of-service vulnerability in internationalized URLs7.5 Highrubygem-hammer_cliRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Highrubygem-hammer_cliRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Highrubygem-hammer_cliRed HatDoS in SnakeYAML6.5 Mediumrubygem-hammer_cliRed HatDoS in SnakeYAML6.5 Mediumrubygem-hammer_cliRed HatDoS in SnakeYAML6.5 Mediumrubygem-hammer_cliRed HatDoS in SnakeYAML6.5 Mediumrubygem-hammer_cliRed HatDenial of Service (DoS)7.5 Highrubygem-hammer_cliRed HatTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 Highrubygem-hammer_cliRed HatActive Record RCE bug with Serialized Columns9.8 Criticalrubygem-hammer_cliRed HatApache Commons Configuration insecure interpolation defaults9.8 Criticalrubygem-hammer_cliRed HatXSS Vulnerability in Action View tag helpers6.1 Mediumrubygem-hammer_cliRed HatCross-site Scripting Vulnerability in Action Pack6.1 Mediumrubygem-hammer_cliRed HatVersions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token...6.5 Mediumrubygem-hammer_cliRed HatForeman before 1.9.0 allows remote authenticated users with the edit_users permission to edit...6.0 Mediumrubygem-hammer_cliRed HatForeman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,...5.0 Mediumrubygem-hammer_cliRed HatForeman before 1.7.5 allows remote authenticated users to bypass organization and location...4.0 Mediumrubygem-hammer_cliRed HatForman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in...5.0 Mediumrubygem-hammer_cliRed HatCross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1...4.3 Mediumrubygem-hammer_cliRed HatSimpleGeo python-oauth2 does not check the nonce allowing replay attacks4.3 Mediumrubygem-hammer_cliRed HatSimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces5.8 Mediumrubygem-hammer_cliRed HatApache Tomcat affected by vulnerability in TLS and SSL protocol5.8 Medium