https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:30:45.051588+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-09786 bdu:2015-09786 2026-10-03T19:30:45.186814+00:00 bdu:2015-09786 https://cve.radiocsirt.org/vuln/certfr-2014-avi-273 certfr-2014-avi-273 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Puppet</span>. Elles permettent à un attaquant… 2026-10-03T19:30:45.186858+00:00 certfr-2014-avi-273 https://cve.radiocsirt.org/vuln/euvd-2026-99070 EUVD-2026-99070 2026-10-03T19:30:45.186878+00:00 EUVD-2026-99070 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3248 fkie_cve-2014-3248 2026-10-03T19:30:45.186891+00:00

Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2) Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so; or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so in puppet/confine.

 https://cve.radiocsirt.org/vuln/ghsa-92v7-pq4h-58j5 GHSA-92v7-pq4h-58j5 — facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerability 2026-10-03T19:30:45.186922+00:00

Affected: RubyGems: facter, RubyGems: hiera, RubyGems: puppet, RubyGems: mcollective-client

Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) `rubygems/defaults/operating_system.rb`, (2) `Win32API.rb`, (3) `Win32API.so`, (4) `safe_yaml.rb`, (5) `safe_yaml/deep.rb`, or (6) `safe_yaml/deep.so`; or (7) `operatingsystem.rb`, (8) `operatingsystem.so`, (9) `osfamily.rb`, or (10) `osfamily.so` in `puppet/confine`.

 https://cve.radiocsirt.org/vuln/gsd-2014-3248 gsd-2014-3248 2026-10-03T19:30:45.186957+00:00 gsd-2014-3248 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10565-1 openSUSE-SU-2024:10565-1 — ruby2.2-rubygem-facter-2.4.6-2.1 on GA media 2026-10-03T19:30:45.186969+00:00

ruby2.2-rubygem-facter-2.4.6-2.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-ru-2015:0696-1 SUSE-RU-2015:0696-1 — Security update for puppet 2026-10-03T19:30:45.186986+00:00

Security update for puppet

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3248 UBUNTU-CVE-2014-3248 2026-10-03T19:30:45.187002+00:00

Affected: Ubuntu:14.04:LTS: puppet, Ubuntu:14.04:LTS: facter

Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2) Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so; or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so in puppet/confine.