tfm-ror51-rubygem-activerecord vulnerabilities (Red Hat)

28 vulnerabilities.

• tfm-ror51-rubygem-activerecord Red Hat Red Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering... CVE-2017-12175 3.5 LowJuly 26, 2018
• tfm-ror51-rubygem-activerecord Red Hat In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and... CVE-2018-1090 5.5 MediumJune 18, 2018
• tfm-ror51-rubygem-activerecord Red Hat In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode CVE-2016-1000352 Fix available 7.4 HighJune 4, 2018
• tfm-ror51-rubygem-activerecord Red Hat In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode CVE-2016-1000344 Fix available 7.4 HighJune 4, 2018
• tfm-ror51-rubygem-activerecord Red Hat The Bouncy Castle JCE Provider carry a propagation bug CVE-2016-1000340 Fix available 7.5 HighJune 4, 2018
• tfm-ror51-rubygem-activerecord Red Hat In Bouncy Castle JCE Provider the other party DH public key is not fully validated CVE-2016-1000346 Fix available 3.7 LowJune 4, 2018
• tfm-ror51-rubygem-activerecord Red Hat Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 CVE-2016-1000345 Fix available 5.9 MediumJune 4, 2018
• tfm-ror51-rubygem-activerecord Red Hat In Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values CVE-2016-1000343 Fix available 7.5 HighJune 4, 2018
• tfm-ror51-rubygem-activerecord Red Hat In Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification CVE-2016-1000342 Fix available 7.5 HighJune 4, 2018
• tfm-ror51-rubygem-activerecord Red Hat Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 CVE-2016-1000341 Fix available 5.9 MediumJune 4, 2018
• tfm-ror51-rubygem-activerecord Red Hat Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 CVE-2016-1000339 Fix available 5.3 MediumJune 4, 2018
• tfm-ror51-rubygem-activerecord Red Hat In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate CVE-2016-1000338 Fix available 7.5 HighJune 1, 2018
• tfm-ror51-rubygem-activerecord Red Hat Denial of Service in Google Guava CVE-2018-10237 Fix available 5.9 MediumApril 26, 2018
• tfm-ror51-rubygem-activerecord Red Hat Bouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions CVE-2018-5382 Fix available 4.4 MediumApril 16, 2018
• tfm-ror51-rubygem-activerecord Red Hat An input sanitization flaw was found in the id field in the dashboard controller of Foreman... CVE-2018-1096 6.5 MediumApril 5, 2018
• tfm-ror51-rubygem-activerecord Red Hat A flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for... CVE-2018-1097 8.8 HighApril 4, 2018
• tfm-ror51-rubygem-activerecord Red Hat Django Denial-of-service possibility in truncatechars_html and truncatewords_html template filters CVE-2018-7537 Fix available 5.3 MediumMarch 6, 2018
• tfm-ror51-rubygem-activerecord Red Hat Django denial-of-service possibility in urlize and urlizetrunc template filters CVE-2018-7536 Fix available 5.3 MediumMarch 6, 2018
• tfm-ror51-rubygem-activerecord Red Hat In previous versions of Puppet Agent it was possible for the agent to retrieve facts from an... CVE-2017-10690 6.5 MediumFebruary 9, 2018
• tfm-ror51-rubygem-activerecord Red Hat Django vulnerable to information leakage in AuthenticationForm CVE-2018-6188 Fix available 7.5 HighFebruary 5, 2018
• tfm-ror51-rubygem-activerecord Red Hat Privilege Escalation in Hibernate Validator CVE-2017-7536 Fix available 7.0 HighJanuary 10, 2018
• tfm-ror51-rubygem-activerecord Red Hat Tarball permission preservation in puppet CVE-2017-10689 Fix available 5.5 MediumDecember 31, 2017
• tfm-ror51-rubygem-activerecord Red Hat An attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on... CVE-2017-15100 6.1 MediumNovember 27, 2017
• tfm-ror51-rubygem-activerecord Red Hat jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution CVE-2017-15095 Fix available 9.8 CriticalNovember 16, 2017
• tfm-ror51-rubygem-activerecord Red Hat Withdrawn Advisory: Improper Restriction of XML External Entity Reference in Apache ActiveMQ CVE-2015-3208 Rejected 9.8 CriticalJuly 25, 2017
• tfm-ror51-rubygem-activerecord Red Hat Django open redirect and possible XSS attack via user-supplied numeric redirect URLs CVE-2017-7233 Fix available 6.1 MediumApril 4, 2017
• tfm-ror51-rubygem-activerecord Red Hat QOS.ch Logback vulnerable to Deserialization of Untrusted Data CVE-2017-5929 Fix available 9.8 CriticalMarch 13, 2017
• tfm-ror51-rubygem-activerecord Red Hat Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain... CVE-2015-6644 Fix available 3.3 LowJanuary 6, 2016