satellite vulnerabilities (Red Hat)
260 vulnerabilities.
satelliteRed HatCSRF Vulnerability in rails-ujs6.5 MediumsatelliteRed HatRack allows Percent-encoded cookies to overwrite existing prefixed cookie names7.5 HighsatelliteRed HatDeserialization of untrusted data in Jackson Databind8.1 HighsatelliteRed HatDeserialization of untrusted data in Jackson Databind8.1 HighsatelliteRed HatDeserialization of untrusted data in Jackson Databind8.1 HighsatelliteRed HatDeserialization of untrusted data in Jackson Databind8.1 HighsatelliteRed HatRegular Expression Denial of Service in websocket-extensions (RubyGem)7.5 HighsatelliteRed HatAbility to forge per-form CSRF tokens in Rails4.3 MediumsatelliteRed HatCircumvention of file size limits in ActiveStorage7.5 HighsatelliteRed HatPossible Strong Parameters Bypass in ActionPack7.5 HighsatelliteRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 CriticalsatelliteRed HatDirectory traversal in Rack::Directory app bundled with Rack8.6 HighsatelliteRed HatImproper Input Validation in Hibernate Validator5.3 MediumsatelliteRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.1 HighsatelliteRed HatDenial of Service in Netty7.5 HighsatelliteRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 HighsatelliteRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 HighsatelliteRed HatPossible XSS vulnerability in ActionView4.0 MediumsatelliteRed HatPuppet Server and PuppetDB provide useful performance and debugging information via their metrics...7.5 HighsatelliteRed HatSQL injection in Django8.8 HighsatelliteRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 CriticalsatelliteRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 CriticalsatelliteRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 CriticalsatelliteRed HatOS Command Injection in Rake6.4 MediumsatelliteRed HatImproper Certificate Validation in Puppet6.5 MediumsatelliteRed HatDeserialization of Untrusted Data in jackson-databind9.8 CriticalsatelliteRed HatHTTP Request Smuggling in Netty7.5 HighsatelliteRed HatLimited header injection when using dynamic overrides with user input in RubyGems secure_headers4.4 MediumsatelliteRed HatDirective injection when using dynamic overrides with user input in RubyGems secure_headers4.4 MediumsatelliteRed HatDeserialization of Untrusted Data in jackson-databind9.8 CriticalsatelliteRed HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 MediumsatelliteRed HatPrevious versions of Puppet Agent didn't verify the peer in the SSL connection prior to...5.4 MediumsatelliteRed HatKatello cleartext password storage issue4.1 MediumsatelliteRed HatDouble Free in psutil7.5 HighsatelliteRed HatThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 MediumsatelliteRed HatImproper Verification of Cryptographic Signature in Pure-Python ECDSA7.4 HighsatelliteRed HatDuplicate Advisory: possible DoS caused by malformed signature decoding in Pure-Python ECDSA3.7 LowsatelliteRed HatApache MINA SSLFilter security Issue7.5 HighsatelliteRed HatInsecure Deserialization in Apache Commons Beanutils7.3 HighsatelliteRed HatIt was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce...7.4 HighsatelliteRed HatAn authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously,...6.5 MediumsatelliteRed HatDjango Incorrect HTTP detection with reverse-proxy connecting via HTTPS5.3 MediumsatelliteRed HatTwisted CRLF Injection6.1 MediumsatelliteRed HatInformation exposure in FasterXML jackson-databind7.5 HighsatelliteRed HatIt was discovered that a world-readable log file belonging to Candlepin component of Red Hat...5.5 MediumsatelliteRed HatA lack of access control was found in the message queues maintained by Satellite's QPID broker...8.0 HighsatelliteRed HatIn Foreman it was discovered that the delete compute resource operation, when executed from the...4.9 MediumsatelliteRed HatJinja2 sandbox escape vulnerability8.6 HighsatelliteRed HatJinja2 sandbox escape via string formatting8.6 HighsatelliteRed Hatkatello Cross-site Scripting vulnerability5.4 Medium- Show moreLoading…