https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:16:01.048571+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-10271 cnvd-2016-10271 2026-10-02T23:16:01.060668+00:00 cnvd-2016-10271 https://cve.radiocsirt.org/vuln/euvd-2026-87264 EUVD-2026-87264 2026-10-02T23:16:01.060706+00:00 EUVD-2026-87264 https://cve.radiocsirt.org/vuln/fkie_cve-2016-8613 fkie_cve-2016-8613 2026-10-02T23:16:01.060727+00:00

A flaw was found in foreman 1.5.1. The remote execution plugin runs commands on hosts over SSH from the Foreman web UI. When a job is submitted that contains HTML tags, the console output shown in the web UI does not escape the output causing any HTML or JavaScript to run in the user's browser. The output of the job is stored, making this a stored XSS vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-hh7m-gjfx-m9cw GHSA-hh7m-gjfx-m9cw 2026-10-02T23:16:01.060759+00:00

A flaw was found in foreman 1.5.1. The remote execution plugin runs commands on hosts over SSH from the Foreman web UI. When a job is submitted that contains HTML tags, the console output shown in the web UI does not escape the output causing any HTML or JavaScript to run in the user's browser. The output of the job is stored, making this a stored XSS vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2016-8613 gsd-2016-8613 2026-10-02T23:16:01.060776+00:00 gsd-2016-8613 https://cve.radiocsirt.org/vuln/rhsa-2018:0336 RHSA-2018:0336 — Red Hat Security Advisory: Satellite 6.3 security, bug fix, and enhancement update 2026-10-02T23:16:01.060786+00:00

rubygem-will_paginate: XSS vulnerabilities foreman: models with a 'belongs_to' association to an Organization do not verify association belongs to that Organization V8: integer overflow leading to buffer overflow in Zone::New foreman: inspect in a provisioning template exposes sensitive controller information pulp: Leakage of CA key in pulp-qpid-ssl-cfg pulp: Unsafe use of bash $RANDOM for NSS DB password and seed foreman: privilege escalation through Organization and Locations API foreman: Information disclosure in provisioning template previews foreman: inside discovery-debug, the root password is displayed in plaintext foreman: Persistent XSS in Foreman remote execution plugin foreman: Foreman information leak through unauthorized multiple_checkboxes helper foreman: Information leak through organizations and locations feature foreman: Stored XSS vulnerability in remote execution plugin foreman: Stored XSS in org/loc wizard foreman: Stored XSS via organization/location with HTML in name foreman-debug: missing obfuscation of sensitive information katello-debug: Possible symlink attacks due to use of predictable file names puppet: Unsafe YAML deserialization rubygem-hammer_cli: no verification of API server's SSL certificate foreman: Image password leak Interconnect: Denial of Service vulnerability in Red Hat JBoss AMQ Interconnect katello: SQL inject in errata-related REST API