https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:05:06.498583+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-09668 bdu:2015-09668 2026-10-03T01:05:06.547130+00:00 bdu:2015-09668 https://cve.radiocsirt.org/vuln/euvd-2026-110803 EUVD-2026-110803 2026-10-03T01:05:06.547168+00:00 EUVD-2026-110803 https://cve.radiocsirt.org/vuln/fkie_cve-2012-1987 fkie_cve-2012-1987 2026-10-03T01:05:06.547183+00:00

Unspecified vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys to (1) cause a denial of service (memory consumption) via a REST request to a stream that triggers a thread block, as demonstrated using CVE-2012-1986 and /dev/random; or (2) cause a denial of service (filesystem consumption) via crafted REST requests that use "a marshaled form of a Puppet::FileBucket::File object" to write to arbitrary file locations.

 https://cve.radiocsirt.org/vuln/ghsa-v58w-6xc2-w799 GHSA-v58w-6xc2-w799 — Puppet Denial of Service and Arbitrary File Write 2026-10-03T01:05:06.547229+00:00

Affected: RubyGems: puppet

A vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys to **(1)** cause a denial of service (memory consumption) via a REST request to a stream that triggers a thread block, as demonstrated using CVE-2012-1986 and `/dev/random`; or **(2)** cause a denial of service (filesystem consumption) via crafted REST requests that use "a marshaled form of a `Puppet::FileBucket::File object`" to write to arbitrary file locations.

 https://cve.radiocsirt.org/vuln/gsd-2012-1987 gsd-2012-1987 2026-10-03T01:05:06.547259+00:00 gsd-2012-1987 https://cve.radiocsirt.org/vuln/rhsa-2012:1542 RHSA-2012:1542 — Red Hat Security Advisory: CloudForms Commons 1.1 security update 2026-10-03T01:05:06.547272+00:00

puppet: Filebucket arbitrary file read puppet: Filebucket denial of service puppet: Filebucket arbitrary code execution rubygem-mail: directory traversal rubygem-mail: arbitrary command execution when using exim or sendmail from commandline rubygem-actionpack: Unsafe query generation rubygem-activerecord: SQL injection when processing nested query paramaters rubygem-actionpack: Unsafe query generation (a different flaw than CVE-2012-2660) rubygem-activerecord: SQL injection when processing nested query paramaters (a different flaw than CVE-2012-2661) rubygem-actionpack: DoS vulnerability in authenticate_or_request_with_http_digest rubygem-actionpack: potential XSS vulnerability in select_tag prompt rubygem-actionpack: potential XSS vulnerability rubygem-actionpack: XSS Vulnerability in strip_tags puppet: authenticated clients allowed to read arbitrary files from the puppet master puppet: authenticated clients allowed to delete arbitrary files on the puppet master puppet: insufficient validation of agent names in CN of SSL certificate requests