https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:38:12.931274+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-09724 bdu:2015-09724 2026-10-03T17:38:13.028775+00:00 bdu:2015-09724 https://cve.radiocsirt.org/vuln/euvd-2026-105517 EUVD-2026-105517 2026-10-03T17:38:13.028855+00:00 EUVD-2026-105517 https://cve.radiocsirt.org/vuln/fkie_cve-2013-1640 fkie_cve-2013-1640 2026-10-03T17:38:13.028882+00:00

The (1) template and (2) inline_template functions in the master server in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2 allows remote authenticated users to execute arbitrary code via a crafted catalog request.

 https://cve.radiocsirt.org/vuln/ghsa-86qh-qpc6-jff7 GHSA-86qh-qpc6-jff7 2026-10-03T17:38:13.028928+00:00

The (1) template and (2) inline_template functions in the master server in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2 allows remote authenticated users to execute arbitrary code via a crafted catalog request.

 https://cve.radiocsirt.org/vuln/gsd-2013-1640 gsd-2013-1640 2026-10-03T17:38:13.028965+00:00 gsd-2013-1640 https://cve.radiocsirt.org/vuln/rhsa-2013:0710 RHSA-2013:0710 — Red Hat Security Advisory: puppet security update 2026-10-03T17:38:13.028979+00:00

Puppet: Directory /var/log/puppet is world readable Puppet: catalog request code execution Puppet: HTTP GET request catalog retrieval Puppet: SSL protocol downgrade Puppet: HTTP PUT report saving code execution vulnerability Puppet: default auth.conf allows authenticated node to submit a report for any other node