https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:20:59.478144+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-13981 cnvd-2018-13981 2026-10-04T05:20:59.563081+00:00 cnvd-2018-13981 https://cve.radiocsirt.org/vuln/euvd-2026-105835 EUVD-2026-105835 2026-10-04T05:20:59.563119+00:00 EUVD-2026-105835 https://cve.radiocsirt.org/vuln/fkie_cve-2013-2049 fkie_cve-2013-2049 2026-10-04T05:20:59.563133+00:00

Red Hat CloudForms 2 Management Engine (CFME) allows remote attackers to conduct session tampering attacks by leveraging use of a static secret_token.rb secret.

 https://cve.radiocsirt.org/vuln/ghsa-hwwg-f5h3-wwv3 GHSA-hwwg-f5h3-wwv3 2026-10-04T05:20:59.563163+00:00

Red Hat CloudForms 2 Management Engine (CFME) allows remote attackers to conduct session tampering attacks by leveraging use of a static secret_token.rb secret.

 https://cve.radiocsirt.org/vuln/gsd-2013-2049 gsd-2013-2049 2026-10-04T05:20:59.563178+00:00 gsd-2013-2049 https://cve.radiocsirt.org/vuln/rhea-2013:1487 RHEA-2013:1487 — Red Hat Enhancement Advisory: Red Hat CloudForms 3.0 product update 2026-10-04T05:20:59.563189+00:00

EVM: CSRF postgresql: Insecure switch parsing postgresql: Improper randomization of pgcrypto functions (requiring random seed) postgresql: Improper user privilege check for on-line backups 2: static secret_token.rb value 2: miq_policy/explorer SQL injection interface: Ruby code injection CloudForms: user password stored in recoverable format