https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T05:43:35.225045+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-05678 cnvd-2015-05678 2026-10-09T05:43:35.255853+00:00 cnvd-2015-05678 https://cve.radiocsirt.org/vuln/euvd-2026-91734 EUVD-2026-91734 2026-10-09T05:43:35.255903+00:00 EUVD-2026-91734 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3235 fkie_cve-2015-3235 2026-10-09T05:43:35.255918+00:00

Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit administrator users and change their passwords via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-5jmw-rjr2-cj2c GHSA-5jmw-rjr2-cj2c 2026-10-09T05:43:35.255951+00:00

Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit administrator users and change their passwords via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2015-3235 gsd-2015-3235 2026-10-09T05:43:35.255966+00:00 gsd-2015-3235 https://cve.radiocsirt.org/vuln/rhsa-2015:1591 RHSA-2015:1591 — Red Hat Security Advisory: Red Hat Satellite 6.1.1 on RHEL 7 2026-10-09T05:43:35.255977+00:00

TLS: MITM attacks via session renegotiation python-oauth2: _check_signature() ignores the nonce value when validating signed urls python-oauth2: Uses poor PRNG in nonce foreman: cross-site scripting (XSS) flaw in template preview screen foreman: lack of SSL certificate validation when performing LDAPS authentication foreman: API not scoping resources to taxonomies foreman: the _session_id cookie is issued without the Secure flag foreman: edit_users permission allows changing of admin passwords