https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:15:31.262171+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-18618 cnvd-2017-18618 2026-10-03T10:15:31.330586+00:00 cnvd-2017-18618 https://cve.radiocsirt.org/vuln/euvd-2026-93146 EUVD-2026-93146 2026-10-03T10:15:31.330624+00:00 EUVD-2026-93146 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5152 fkie_cve-2015-5152 2026-10-03T10:15:31.330639+00:00

Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the require_ssl setting is set to true, which allows remote attackers to obtain user credentials via a man-in-the-middle attack.

 https://cve.radiocsirt.org/vuln/ghsa-f78j-3cq3-m6p4 GHSA-f78j-3cq3-m6p4 2026-10-03T10:15:31.330669+00:00

Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the require_ssl setting is set to true, which allows remote attackers to obtain user credentials via a man-in-the-middle attack.

 https://cve.radiocsirt.org/vuln/gsd-2015-5152 gsd-2015-5152 2026-10-03T10:15:31.330685+00:00 gsd-2015-5152 https://cve.radiocsirt.org/vuln/rhba-2016:1501 RHBA-2016:1501 — Red Hat Bug Fix Advisory: Red Hat Satellite 6.2 Capsule and Server 2026-10-03T10:15:31.330696+00:00

Foreman: API permits HTTP requests when require_ssl is enabled foreman: XSS in hidden parameter value switcher pulp: Node certificate containing private key stored in world-readable file pulp: Insecure temporary file used when generating certificate for Pulp Nodes pulp: Race condition when generating RSA keys for authenticating messages between server and consumers pulp: Agent certificate containing private key is stored in world-readable file foreman: Missing input validation in Smart Proxy allows RCE via TFTP file variant parameter