https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T06:58:55.754338+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-99403 EUVD-2026-99403 2026-10-09T06:58:55.842252+00:00 EUVD-2026-99403 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3653 fkie_cve-2014-3653 2026-10-09T06:58:55.842299+00:00

Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted provisioning template.

 https://cve.radiocsirt.org/vuln/ghsa-46hx-7mg5-6vx7 GHSA-46hx-7mg5-6vx7 2026-10-09T06:58:55.842354+00:00

Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted provisioning template.

 https://cve.radiocsirt.org/vuln/gsd-2014-3653 gsd-2014-3653 2026-10-09T06:58:55.842381+00:00 gsd-2014-3653 https://cve.radiocsirt.org/vuln/rhsa-2015:1591 RHSA-2015:1591 — Red Hat Security Advisory: Red Hat Satellite 6.1.1 on RHEL 7 2026-10-09T06:58:55.842400+00:00

TLS: MITM attacks via session renegotiation python-oauth2: _check_signature() ignores the nonce value when validating signed urls python-oauth2: Uses poor PRNG in nonce foreman: cross-site scripting (XSS) flaw in template preview screen foreman: lack of SSL certificate validation when performing LDAPS authentication foreman: API not scoping resources to taxonomies foreman: the _session_id cookie is issued without the Secure flag foreman: edit_users permission allows changing of admin passwords