https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T10:48:56.662877+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-99346 EUVD-2026-99346 2026-10-09T10:48:56.675859+00:00 EUVD-2026-99346 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3590 fkie_cve-2014-3590 2026-10-09T10:48:56.675903+00:00

Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token in the logout action. Therefore, an attacker can log out a user by having them view specially crafted content.

 https://cve.radiocsirt.org/vuln/ghsa-246c-q58f-ccm9 GHSA-246c-q58f-ccm9 2026-10-09T10:48:56.675948+00:00

Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token in the logout action. Therefore, an attacker can log out a user by having them view specially crafted content.

 https://cve.radiocsirt.org/vuln/gsd-2014-3590 gsd-2014-3590 2026-10-09T10:48:56.675975+00:00 gsd-2014-3590 https://cve.radiocsirt.org/vuln/rhsa-2015:1592 RHSA-2015:1592 — Red Hat Security Advisory: Red Hat Satellite 6.1.1 on RHEL 6 2026-10-09T10:48:56.675995+00:00

python-oauth2: _check_signature() ignores the nonce value when validating signed urls python-oauth2: Uses poor PRNG in nonce rhn_satellite_6: cross-site request forgery (CSRF) can force logout foreman: cross-site scripting (XSS) flaw in template preview screen foreman: lack of SSL certificate validation when performing LDAPS authentication foreman: API not scoping resources to taxonomies foreman: the _session_id cookie is issued without the Secure flag foreman: edit_users permission allows changing of admin passwords