https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T09:16:16.469490+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-05677 cnvd-2015-05677 2026-10-09T09:16:16.493609+00:00 cnvd-2015-05677 https://cve.radiocsirt.org/vuln/euvd-2026-91676 EUVD-2026-91676 2026-10-09T09:16:16.493653+00:00 EUVD-2026-91676 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3155 fkie_cve-2015-3155 2026-10-09T09:16:16.493667+00:00

Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

 https://cve.radiocsirt.org/vuln/ghsa-286g-52x6-9289 GHSA-286g-52x6-9289 2026-10-09T09:16:16.493695+00:00

Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

 https://cve.radiocsirt.org/vuln/gsd-2015-3155 gsd-2015-3155 2026-10-09T09:16:16.493711+00:00 gsd-2015-3155 https://cve.radiocsirt.org/vuln/rhsa-2015:1591 RHSA-2015:1591 — Red Hat Security Advisory: Red Hat Satellite 6.1.1 on RHEL 7 2026-10-09T09:16:16.493722+00:00

TLS: MITM attacks via session renegotiation python-oauth2: _check_signature() ignores the nonce value when validating signed urls python-oauth2: Uses poor PRNG in nonce foreman: cross-site scripting (XSS) flaw in template preview screen foreman: lack of SSL certificate validation when performing LDAPS authentication foreman: API not scoping resources to taxonomies foreman: the _session_id cookie is issued without the Secure flag foreman: edit_users permission allows changing of admin passwords