satellite-capsule vulnerabilities (Red Hat)
233 vulnerabilities.
satellite-capsuleRed HatDjango Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks7.5 Highsatellite-capsuleRed HatPath Traversal in Django4.9 Mediumsatellite-capsuleRed HatCatastrophic backtracking in URL authority parser when passed URL containing many @ characters7.5 Highsatellite-capsuleRed HatA flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not...6.5 Mediumsatellite-capsuleRed HatKeepalive Connections Causing Denial Of Service in puma7.5 Highsatellite-capsuleRed HatPossible DoS Vulnerability in Action Controller Token Authentication7.5 Highsatellite-capsuleRed HatAction Pack contains Information Disclosure / Unintended Method Execution vulnerability7.5 Highsatellite-capsuleRed HatDenial of Service in Action Dispatch7.5 Highsatellite-capsuleRed HatPath Traversal in Django7.5 Highsatellite-capsuleRed HatA smart proxy that provides a restful API to various sub-systems of the Foreman is affected by...5.9 Mediumsatellite-capsuleRed HatA flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0. A...6.3 Mediumsatellite-capsuleRed HatDirectory Traversal in Django5.3 Mediumsatellite-capsuleRed HatActiverecord-session_store Vulnerable to Timing Attack5.3 Mediumsatellite-capsuleRed HatOpen redirect vulnerability in aiohttp3.1 Lowsatellite-capsuleRed HatA flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to...5.3 Mediumsatellite-capsuleRed HatImproper Input Validation in PyYAML9.8 Criticalsatellite-capsuleRed HatLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files6.2 Mediumsatellite-capsuleRed HatXXE in Nokogiri2.6 Lowsatellite-capsuleRed HatTemp directory permission issue in Guava3.3 Lowsatellite-capsuleRed HatGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 Mediumsatellite-capsuleRed HatXSS in Action View5.4 Mediumsatellite-capsuleRed HatA flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files....8.8 Highsatellite-capsuleRed HatUntrusted users can run pending migrations in production in Rails6.5 Mediumsatellite-capsuleRed HatCSRF Vulnerability in rails-ujs6.5 Mediumsatellite-capsuleRed HatRack allows Percent-encoded cookies to overwrite existing prefixed cookie names7.5 Highsatellite-capsuleRed HatDeserialization of untrusted data in Jackson Databind8.1 Highsatellite-capsuleRed HatDeserialization of untrusted data in Jackson Databind8.1 Highsatellite-capsuleRed HatDeserialization of untrusted data in Jackson Databind8.1 Highsatellite-capsuleRed HatDeserialization of untrusted data in Jackson Databind8.1 Highsatellite-capsuleRed HatRegular Expression Denial of Service in websocket-extensions (RubyGem)7.5 Highsatellite-capsuleRed HatAbility to forge per-form CSRF tokens in Rails4.3 Mediumsatellite-capsuleRed HatCircumvention of file size limits in ActiveStorage7.5 Highsatellite-capsuleRed HatPossible Strong Parameters Bypass in ActionPack7.5 Highsatellite-capsuleRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 Criticalsatellite-capsuleRed HatDirectory traversal in Rack::Directory app bundled with Rack8.6 Highsatellite-capsuleRed HatImproper Input Validation in Hibernate Validator5.3 Mediumsatellite-capsuleRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.1 Highsatellite-capsuleRed HatDenial of Service in Netty7.5 Highsatellite-capsuleRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highsatellite-capsuleRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highsatellite-capsuleRed HatPossible XSS vulnerability in ActionView4.0 Mediumsatellite-capsuleRed HatPuppet Server and PuppetDB provide useful performance and debugging information via their metrics...7.5 Highsatellite-capsuleRed HatSQL injection in Django8.8 Highsatellite-capsuleRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalsatellite-capsuleRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalsatellite-capsuleRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalsatellite-capsuleRed HatOS Command Injection in Rake6.4 Mediumsatellite-capsuleRed HatImproper Certificate Validation in Puppet6.5 Mediumsatellite-capsuleRed HatDeserialization of Untrusted Data in jackson-databind9.8 Criticalsatellite-capsuleRed HatHTTP Request Smuggling in Netty7.5 High- Show moreLoading…