https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:55:54.336933+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-113439 EUVD-2026-113439 2026-10-03T12:55:54.341827+00:00 EUVD-2026-113439 https://cve.radiocsirt.org/vuln/fkie_cve-2012-6119 fkie_cve-2012-6119 2026-10-03T12:55:54.341862+00:00

Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.

 https://cve.radiocsirt.org/vuln/ghsa-jffh-2rxm-9wjg GHSA-jffh-2rxm-9wjg 2026-10-03T12:55:54.341893+00:00

Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.

 https://cve.radiocsirt.org/vuln/gsd-2012-6119 gsd-2012-6119 2026-10-03T12:55:54.341910+00:00 gsd-2012-6119 https://cve.radiocsirt.org/vuln/rhsa-2013:0686 RHSA-2013:0686 — Red Hat Security Advisory: Subscription Asset Manager 1.2.1 update 2026-10-03T12:55:54.341921+00:00

Candlepin: bootstrap RPM deploys CA certificate file with mode 666 Candlepin: Re-enable manifest signature checking rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template rubygem-rack: Timing attack in cookie sessions rubygem-json: Denial of Service and SQL Injection rubygem-activerecord/rubygem-activemodel: circumvention of attr_protected Katello: Notifications page Username XSS