https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:33:07.540561+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-03444 cnvd-2016-03444 2026-10-03T03:33:07.594652+00:00 cnvd-2016-03444 https://cve.radiocsirt.org/vuln/euvd-2026-83797 EUVD-2026-83797 2026-10-03T03:33:07.594690+00:00 EUVD-2026-83797 https://cve.radiocsirt.org/vuln/fkie_cve-2016-3728 fkie_cve-2016-3728 2026-10-03T03:33:07.594753+00:00

Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman before 1.10.4 and 1.11.x before 1.11.2 allows remote attackers to execute arbitrary code via the PXE template type portion of the PATH_INFO to tftp/.

 https://cve.radiocsirt.org/vuln/ghsa-p492-9h7w-9x72 GHSA-p492-9h7w-9x72 2026-10-03T03:33:07.594784+00:00

Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman before 1.10.4 and 1.11.x before 1.11.2 allows remote attackers to execute arbitrary code via the PXE template type portion of the PATH_INFO to tftp/.

 https://cve.radiocsirt.org/vuln/gsd-2016-3728 gsd-2016-3728 2026-10-03T03:33:07.594801+00:00 gsd-2016-3728 https://cve.radiocsirt.org/vuln/rhba-2016:1501 RHBA-2016:1501 — Red Hat Bug Fix Advisory: Red Hat Satellite 6.2 Capsule and Server 2026-10-03T03:33:07.594812+00:00

Foreman: API permits HTTP requests when require_ssl is enabled foreman: XSS in hidden parameter value switcher pulp: Node certificate containing private key stored in world-readable file pulp: Insecure temporary file used when generating certificate for Pulp Nodes pulp: Race condition when generating RSA keys for authenticating messages between server and consumers pulp: Agent certificate containing private key is stored in world-readable file foreman: Missing input validation in Smart Proxy allows RCE via TFTP file variant parameter