rubygem-katello vulnerabilities (Red Hat)
101 vulnerabilities.
rubygem-katelloRed HatTOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix6.4 Mediumrubygem-katelloRed HatForman: foreman: remote code execution via command injection in websocket proxy8.0 Highrubygem-katelloRed HatRubygem-katello: katello: denial of service and potential information disclosure via sql injection5.4 Mediumrubygem-katelloRed HatRubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username8.3 Highrubygem-katelloRed HatPotential SQL injection via QuerySet.order_by and FilteredRelation5.4 Mediumrubygem-katelloRed HatPotential SQL injection in column aliases via control characters5.4 Mediumrubygem-katelloRed HatPotential denial-of-service vulnerability in django.utils.text.Truncator HTML methods7.5 Highrubygem-katelloRed HatPotential SQL injection via raster lookups on PostGIS5.4 Mediumrubygem-katelloRed HatPotential denial-of-service vulnerability via repeated headers when using ASGI7.5 Highrubygem-katelloRed HatFog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation8.1 Highrubygem-katelloRed HatForeman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification8.1 Highrubygem-katelloRed HatUnexpected session resumption in crypto/tls10.0 Criticalrubygem-katelloRed HatMemory exhaustion in query parameter parsing in net/url7.5 Highrubygem-katelloRed HatExcessive resource consumption when printing error string for host certificate validation in crypto/x5097.5 Highrubygem-katelloRed HatForeman: satellite: graphql api permission bypass leads to information disclosure5.0 Mediumrubygem-katelloRed HatBrotli decompression bomb DoS in scrapy/scrapy7.5 Highrubygem-katelloRed HatOut-of-bounds read & write in RFC 3211 KEK Unwrap9.8 Criticalrubygem-katelloRed HatDjango has a potential denial-of-service vulnerability in IPv6 validation5.8 Mediumrubygem-katelloRed HatJinja has a sandbox breakout through indirect reference to format method5.4 Mediumrubygem-katelloRed HatForeman: read-only access to entire db from templates6.3 Mediumrubygem-katelloRed HatMemory leak7.2 Highrubygem-katelloRed HatPuppet-pulpcore: an authentication bypass vulnerability exists in pulpcore9.8 Criticalrubygem-katelloRed HatPuppet-foreman: an authentication bypass vulnerability exists in foreman9.8 Criticalrubygem-katelloRed HatDjango SQL injection vulnerability7.3 Highrubygem-katelloRed HatHPACK table poisoning in gRPC C++, Python & Ruby6.3 Mediumrubygem-katelloRed HatDjango vulnerable to Denial of Service7.5 Highrubygem-katelloRed HatDjango Path Traversal vulnerability4.3 Mediumrubygem-katelloRed HatDjango vulnerable to user enumeration attack5.3 Mediumrubygem-katelloRed HatDjango vulnerable to Denial of Service7.5 Highrubygem-katelloRed HatDenial of Service via crafted zip file in jaraco/zipp6.2 Mediumrubygem-katelloRed HatProxy-Authorization request header isn't stripped during cross-origin redirects in urllib34.4 Mediumrubygem-katelloRed HatRequests `Session` object does not verify requests after making first request with verify=False5.6 Mediumrubygem-katelloRed HatForeman: host ssh key not being checked in remote execution6.8 Mediumrubygem-katelloRed HatRegular Expression Denial of Service in micromatch5.3 Mediumrubygem-katelloRed Hatnode-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation6.5 Mediumrubygem-katelloRed HatRequest body not stripped after redirect in urllib34.2 Mediumrubygem-katelloRed HatForeman: world readable file containing secrets6.7 Mediumrubygem-katelloRed Hat`Cookie` HTTP header isn't stripped on cross-origin redirects5.9 Mediumrubygem-katelloRed HatGitPython blind local file inclusion4.0 Mediumrubygem-katelloRed HatActionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to4.0 Mediumrubygem-katelloRed Hatjackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode7.5 Highrubygem-katelloRed HatResource exhaustion in Django7.5 Highrubygem-katelloRed HatDjango contains Uncontrolled Resource Consumption via cached header7.5 Highrubygem-katelloRed Hatrails-html-sanitizer contains an incomplete fix for an XSS vulnerability6.1 Mediumrubygem-katelloRed HatPossible XSS vulnerability with certain configurations of rails-html-sanitizer7.2 Highrubygem-katelloRed HatImproper neutralization of data URIs allows XSS in rails-html-sanitizer6.1 Mediumrubygem-katelloRed HatInefficient Regular Expression Complexity in rails-html-sanitizer7.5 Highrubygem-katelloRed HatUncontrolled Recursion in Loofah7.5 Highrubygem-katelloRed HatImproper neutralization of data URIs may allow XSS in Loofah6.1 Mediumrubygem-katelloRed HatInefficient Regular Expression Complexity in Loofah7.5 High- Show moreLoading…