satellite vulnerabilities (Red Hat)
260 vulnerabilities.
satelliteRed Hatkatello SQL Injection vulnerability4.3 MediumsatelliteRed HatA cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker...7.6 HighsatelliteRed HatRack vulnerable to Denial of Service7.5 HighsatelliteRed HatImproper Privilege Management in MySQL Connectors Java8.8 HighsatelliteRed HatA flaw was found in foreman from versions 1.18. A stored cross-site scripting vulnerability...5.4 MediumsatelliteRed Hatforeman before version 1.15.0 is vulnerable to an information leak through organizations and...4.3 MediumsatelliteRed Hatforeman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper...4.3 MediumsatelliteRed Hatkatello Improper Privilege Management vulnerability4.3 MediumsatelliteRed HatDom4j contains a XML Injection vulnerability7.5 HighsatelliteRed HatWithdrawn Advisory: Pulp Improper Path Parsing6.8 MediumsatelliteRed HatIt was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or...6.1 MediumsatelliteRed HatA vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman...6.1 MediumsatelliteRed HatA flaw was found in foreman 1.5.1. The remote execution plugin runs commands on hosts over SSH...6.4 MediumsatelliteRed HatA flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure...7.3 HighsatelliteRed HatRed Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering...3.5 LowsatelliteRed HatA flaw was found in foreman before version 1.15 in the logging of adding and registering images....6.5 MediumsatelliteRed HatIn Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and...5.5 MediumsatelliteRed HatIn Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode7.4 HighsatelliteRed HatIn Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode7.4 HighsatelliteRed HatThe Bouncy Castle JCE Provider carry a propagation bug7.5 HighsatelliteRed HatIn Bouncy Castle JCE Provider the other party DH public key is not fully validated3.7 LowsatelliteRed HatModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 MediumsatelliteRed HatIn Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values7.5 HighsatelliteRed HatIn Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification7.5 HighsatelliteRed HatModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 MediumsatelliteRed HatModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.3 MediumsatelliteRed HatIn Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate7.5 HighsatelliteRed HatDenial of Service in Google Guava5.9 MediumsatelliteRed Hatforeman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging. An...4.7 MediumsatelliteRed HatBouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions4.4 MediumsatelliteRed HatAn input sanitization flaw was found in the id field in the dashboard controller of Foreman...6.5 MediumsatelliteRed HatA flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for...8.8 HighsatelliteRed Hathammer_cli_foreman Improper Certificate Validation vulnerability8.1 HighsatelliteRed Hatrack-protection gem timing attack vulnerability when validating CSRF token5.9 MediumsatelliteRed HatDjango Denial-of-service possibility in truncatechars_html and truncatewords_html template filters5.3 MediumsatelliteRed HatDjango denial-of-service possibility in urlize and urlizetrunc template filters5.3 MediumsatelliteRed HatA Denial of Service vulnerability was found in Apache Qpid Dispatch Router versions 0.7.0 and 0.8...6.5 MediumsatelliteRed HatIn previous versions of Puppet Agent it was possible for the agent to retrieve facts from an...6.5 MediumsatelliteRed HatDjango vulnerable to information leakage in AuthenticationForm7.5 HighsatelliteRed HatPrivilege Escalation in Hibernate Validator7.0 HighsatelliteRed HatTarball permission preservation in puppet5.5 MediumsatelliteRed Hatnet-ldap Improper Certificate Validation vulnerability5.9 MediumsatelliteRed HatAn attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on...6.1 MediumsatelliteRed Hatjackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution9.8 CriticalsatelliteRed HatPallets Werkzeug cross-site scripting vulnerability6.1 MediumsatelliteRed HatCross-site scripting (XSS) vulnerability in Foreman 1.7.0 and after.6.1 MediumsatelliteRed HatWithdrawn Advisory: Improper Restriction of XML External Entity Reference in Apache ActiveMQ9.8 CriticalsatelliteRed Hatdiscovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes...7.0 HighsatelliteRed HatForeman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the...8.1 HighsatelliteRed HatPulp before 2.8.5 uses bash's $RANDOM in an unsafe way to generate passwords.7.5 High- Show moreLoading…