https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:59:11.269699+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-11092 cnvd-2016-11092 2026-10-03T01:59:11.284537+00:00 cnvd-2016-11092 https://cve.radiocsirt.org/vuln/euvd-2026-87297 EUVD-2026-87297 2026-10-03T01:59:11.284586+00:00 EUVD-2026-87297 https://cve.radiocsirt.org/vuln/fkie_cve-2016-8634 fkie_cve-2016-8634 2026-10-03T01:59:11.284608+00:00

A vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman, if the name contains HTML then the second step of the wizard (/organizations/id/step2) will render the HTML. This occurs in the alertbox on the page. The result is a stored XSS attack if an organization/location with HTML in the name is created, then a user is linked directly to this URL.

 https://cve.radiocsirt.org/vuln/ghsa-fjj6-r3pr-3rrj GHSA-fjj6-r3pr-3rrj 2026-10-03T01:59:11.284654+00:00

A vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman, if the name contains HTML then the second step of the wizard (/organizations/id/step2) will render the HTML. This occurs in the alertbox on the page. The result is a stored XSS attack if an organization/location with HTML in the name is created, then a user is linked directly to this URL.

 https://cve.radiocsirt.org/vuln/gsd-2016-8634 gsd-2016-8634 2026-10-03T01:59:11.284684+00:00 gsd-2016-8634 https://cve.radiocsirt.org/vuln/rhsa-2018:0336 RHSA-2018:0336 — Red Hat Security Advisory: Satellite 6.3 security, bug fix, and enhancement update 2026-10-03T01:59:11.284702+00:00

rubygem-will_paginate: XSS vulnerabilities foreman: models with a 'belongs_to' association to an Organization do not verify association belongs to that Organization V8: integer overflow leading to buffer overflow in Zone::New foreman: inspect in a provisioning template exposes sensitive controller information pulp: Leakage of CA key in pulp-qpid-ssl-cfg pulp: Unsafe use of bash $RANDOM for NSS DB password and seed foreman: privilege escalation through Organization and Locations API foreman: Information disclosure in provisioning template previews foreman: inside discovery-debug, the root password is displayed in plaintext foreman: Persistent XSS in Foreman remote execution plugin foreman: Foreman information leak through unauthorized multiple_checkboxes helper foreman: Information leak through organizations and locations feature foreman: Stored XSS vulnerability in remote execution plugin foreman: Stored XSS in org/loc wizard foreman: Stored XSS via organization/location with HTML in name foreman-debug: missing obfuscation of sensitive information katello-debug: Possible symlink attacks due to use of predictable file names puppet: Unsafe YAML deserialization rubygem-hammer_cli: no verification of API server's SSL certificate foreman: Image password leak Interconnect: Denial of Service vulnerability in Red Hat JBoss AMQ Interconnect katello: SQL inject in errata-related REST API