https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T04:23:52.998495+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-03897 bdu:2020-03897 2026-10-05T04:23:53.085516+00:00 bdu:2020-03897 https://cve.radiocsirt.org/vuln/cnvd-2020-44411 cnvd-2020-44411 2026-10-05T04:23:53.085579+00:00 cnvd-2020-44411 https://cve.radiocsirt.org/vuln/euvd-2026-42360 EUVD-2026-42360 2026-10-05T04:23:53.085606+00:00 EUVD-2026-42360 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14324 fkie_cve-2020-14324 2026-10-05T04:23:53.085629+00:00

A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band OS command injection vulnerability can be exploited by authenticated attacker while setuping conversion host through Infrastructure Migration Solution. This flaw allows attacker to execute arbitrary commands on CloudForms server.

 https://cve.radiocsirt.org/vuln/gsd-2020-14324 gsd-2020-14324 2026-10-05T04:23:53.085678+00:00 gsd-2020-14324 https://cve.radiocsirt.org/vuln/rhsa-2020:3358 RHSA-2020:3358 — Red Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update 2026-10-05T04:23:53.085700+00:00

CloudForms: Cross Site Scripting in report menu title / HTML Code Injection CloudForms: Business logic bypass through widgets CloudForms: Missing functional level access control & IDOR lead to compromise CloudForms: CSV Injection in Orchestration Templates CloudForms: Missing access control leads to escalation of admin group privileges CloudForms: Server-Side Request Forgery (SSRF) in Ansible Tower Provider CloudForms: Out-of-band OS Command Injection through conversion host CloudForms: User Impersonation in the API for OIDC and SAML