saslwrapper vulnerabilities (Red Hat)
140 vulnerabilities.
saslwrapperRed Hatrack-protection gem timing attack vulnerability when validating CSRF token5.9 MediumsaslwrapperRed HatDjango Denial-of-service possibility in truncatechars_html and truncatewords_html template filters5.3 MediumsaslwrapperRed HatDjango denial-of-service possibility in urlize and urlizetrunc template filters5.3 MediumsaslwrapperRed HatThe qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a...6.5 MediumsaslwrapperRed HatIn previous versions of Puppet Agent it was possible for the agent to retrieve facts from an...6.5 MediumsaslwrapperRed HatDjango vulnerable to information leakage in AuthenticationForm7.5 HighsaslwrapperRed HatPrivilege Escalation in Hibernate Validator7.0 HighsaslwrapperRed HatTarball permission preservation in puppet5.5 MediumsaslwrapperRed Hatnet-ldap Improper Certificate Validation vulnerability5.9 MediumsaslwrapperRed HatAn attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on...6.1 MediumsaslwrapperRed Hatjackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution9.8 CriticalsaslwrapperRed Hatqpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service ...7.5 HighsaslwrapperRed HatPallets Werkzeug cross-site scripting vulnerability6.1 MediumsaslwrapperRed HatWithdrawn Advisory: Improper Restriction of XML External Entity Reference in Apache ActiveMQ9.8 CriticalsaslwrapperRed HatDjango open redirect and possible XSS attack via user-supplied numeric redirect URLs6.1 MediumsaslwrapperRed HatQOS.ch Logback vulnerable to Deserialization of Untrusted Data9.8 CriticalsaslwrapperRed HatDenial of service in JBoss resteasy7.5 HighsaslwrapperRed HatForeman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read,...5.4 MediumsaslwrapperRed HatModerate severity vulnerability that affects org.apache.qpid:proton-j6.5 MediumsaslwrapperRed HatBouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain...3.3 LowsaslwrapperRed HatForeman before 1.9.0 allows remote authenticated users with the edit_users permission to edit...6.0 MediumsaslwrapperRed HatForeman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,...5.0 MediumsaslwrapperRed HatForeman before 1.7.5 allows remote authenticated users to bypass organization and location...4.0 MediumsaslwrapperRed HatForman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in...5.0 MediumsaslwrapperRed HatCross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1...4.3 MediumsaslwrapperRed HatRack vulnerable to Denial of Service via large parameter depth request5.0 MediumsaslwrapperRed Hatrest-client Gem Vulnerable to Session Fixation9.8 CriticalsaslwrapperRed Hatrest-client allows local users to obtain sensitive information by reading the log2.1 LowsaslwrapperRed HatMongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service...5.0 MediumsaslwrapperRed HatUnspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass...5.0 MediumsaslwrapperRed HatSimpleGeo python-oauth2 does not check the nonce allowing replay attacks4.3 MediumsaslwrapperRed HatMultiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome...7.5 HighsaslwrapperRed HatSimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces5.8 MediumsaslwrapperRed HatAlgorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,...4.3 MediumsaslwrapperRed HatInteger overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and...5.0 MediumsaslwrapperRed HatThe AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial...5.0 MediumsaslwrapperRed HatImproper Authentication in Apache Qpid6.8 MediumsaslwrapperRed HatThe SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in...4.0 MediumsaslwrapperRed HatThe Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat...5.0 MediumsaslwrapperRed HatApache Tomcat affected by vulnerability in TLS and SSL protocol5.8 Medium