satellite-common vulnerabilities (Red Hat)
202 vulnerabilities.
satellite-commonRed HatMemory leak7.2 Highsatellite-commonRed HatPuppet-pulpcore: an authentication bypass vulnerability exists in pulpcore9.8 Criticalsatellite-commonRed HatPuppet-foreman: an authentication bypass vulnerability exists in foreman9.8 Criticalsatellite-commonRed HatDjango SQL injection vulnerability7.3 Highsatellite-commonRed HatHPACK table poisoning in gRPC C++, Python & Ruby6.3 Mediumsatellite-commonRed HatDjango vulnerable to Denial of Service7.5 Highsatellite-commonRed HatDjango Path Traversal vulnerability4.3 Mediumsatellite-commonRed HatDjango vulnerable to user enumeration attack5.3 Mediumsatellite-commonRed HatDjango vulnerable to Denial of Service7.5 Highsatellite-commonRed HatDenial of Service via crafted zip file in jaraco/zipp6.2 Mediumsatellite-commonRed HatProxy-Authorization request header isn't stripped during cross-origin redirects in urllib34.4 Mediumsatellite-commonRed HatRequests `Session` object does not verify requests after making first request with verify=False5.6 Mediumsatellite-commonRed HatForeman: host ssh key not being checked in remote execution6.8 Mediumsatellite-commonRed HatRegular Expression Denial of Service in micromatch5.3 Mediumsatellite-commonRed Hatnode-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation6.5 Mediumsatellite-commonRed HatRequest body not stripped after redirect in urllib34.2 Mediumsatellite-commonRed HatForeman: world readable file containing secrets6.7 Mediumsatellite-commonRed Hat`Cookie` HTTP header isn't stripped on cross-origin redirects5.9 Mediumsatellite-commonRed HatGitPython blind local file inclusion4.0 Mediumsatellite-commonRed HatActionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to4.0 Mediumsatellite-commonRed Hatjackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode7.5 Highsatellite-commonRed HatResource exhaustion in Django7.5 Highsatellite-commonRed HatDjango contains Uncontrolled Resource Consumption via cached header7.5 Highsatellite-commonRed Hatrails-html-sanitizer contains an incomplete fix for an XSS vulnerability6.1 Mediumsatellite-commonRed HatPossible XSS vulnerability with certain configurations of rails-html-sanitizer7.2 Highsatellite-commonRed HatImproper neutralization of data URIs allows XSS in rails-html-sanitizer6.1 Mediumsatellite-commonRed HatInefficient Regular Expression Complexity in rails-html-sanitizer7.5 Highsatellite-commonRed HatUncontrolled Recursion in Loofah7.5 Highsatellite-commonRed HatImproper neutralization of data URIs may allow XSS in Loofah6.1 Mediumsatellite-commonRed HatInefficient Regular Expression Complexity in Loofah7.5 Highsatellite-commonRed HatRemote Code execution in SnakeYAML8.3 Highsatellite-commonRed HatTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Mediumsatellite-commonRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticalsatellite-commonRed HatDjango denial-of-service vulnerability in internationalized URLs7.5 Highsatellite-commonRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Highsatellite-commonRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Highsatellite-commonRed HatDoS in SnakeYAML6.5 Mediumsatellite-commonRed HatDoS in SnakeYAML6.5 Mediumsatellite-commonRed HatDoS in SnakeYAML6.5 Mediumsatellite-commonRed HatDoS in SnakeYAML6.5 Mediumsatellite-commonRed HatDenial of Service (DoS)7.5 Highsatellite-commonRed HatA flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat...4.4 Mediumsatellite-commonRed HatTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 Highsatellite-commonRed HatActive Record RCE bug with Serialized Columns9.8 Criticalsatellite-commonRed HatApache Commons Configuration insecure interpolation defaults9.8 Criticalsatellite-commonRed HatXSS Vulnerability in Action View tag helpers6.1 Mediumsatellite-commonRed HatCross-site Scripting Vulnerability in Action Pack6.1 Mediumsatellite-commonRed HatAn account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with...7.5 Highsatellite-commonRed HatA flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets...5.5 Mediumsatellite-commonRed HatA flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not...6.5 Medium- Show moreLoading…