https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T06:29:55.235102+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-05680 cnvd-2015-05680 2026-10-09T06:29:55.258899+00:00 cnvd-2015-05680 https://cve.radiocsirt.org/vuln/euvd-2026-90593 EUVD-2026-90593 2026-10-09T06:29:55.258945+00:00 EUVD-2026-90593 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1844 fkie_cve-2015-1844 2026-10-09T06:29:55.258959+00:00

Foreman before 1.7.5 allows remote authenticated users to bypass organization and location restrictions by connecting through the REST API.

 https://cve.radiocsirt.org/vuln/ghsa-r6gp-x66j-mhw7 GHSA-r6gp-x66j-mhw7 2026-10-09T06:29:55.258988+00:00

Foreman before 1.7.5 allows remote authenticated users to bypass organization and location restrictions by connecting through the REST API.

 https://cve.radiocsirt.org/vuln/gsd-2015-1844 gsd-2015-1844 2026-10-09T06:29:55.259003+00:00 gsd-2015-1844 https://cve.radiocsirt.org/vuln/rhsa-2015:1591 RHSA-2015:1591 — Red Hat Security Advisory: Red Hat Satellite 6.1.1 on RHEL 7 2026-10-09T06:29:55.259014+00:00

TLS: MITM attacks via session renegotiation python-oauth2: _check_signature() ignores the nonce value when validating signed urls python-oauth2: Uses poor PRNG in nonce foreman: cross-site scripting (XSS) flaw in template preview screen foreman: lack of SSL certificate validation when performing LDAPS authentication foreman: API not scoping resources to taxonomies foreman: the _session_id cookie is issued without the Secure flag foreman: edit_users permission allows changing of admin passwords