https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:57:22.443642+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-105790 EUVD-2026-105790 2026-10-04T10:57:22.527781+00:00 EUVD-2026-105790 https://cve.radiocsirt.org/vuln/fkie_cve-2013-2050 fkie_cve-2013-2050 2026-10-04T10:57:22.527820+00:00

SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the profile[] parameter in an explorer action.

 https://cve.radiocsirt.org/vuln/ghsa-h3r2-9qhv-2vw2 GHSA-h3r2-9qhv-2vw2 2026-10-04T10:57:22.527854+00:00

SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the profile[] parameter in an explorer action.

 https://cve.radiocsirt.org/vuln/gsd-2013-2050 gsd-2013-2050 2026-10-04T10:57:22.527871+00:00 gsd-2013-2050 https://cve.radiocsirt.org/vuln/rhea-2013:1487 RHEA-2013:1487 — Red Hat Enhancement Advisory: Red Hat CloudForms 3.0 product update 2026-10-04T10:57:22.527883+00:00

EVM: CSRF postgresql: Insecure switch parsing postgresql: Improper randomization of pgcrypto functions (requiring random seed) postgresql: Improper user privilege check for on-line backups 2: static secret_token.rb value 2: miq_policy/explorer SQL injection interface: Ruby code injection CloudForms: user password stored in recoverable format