Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:50:25 +0000 EUVD-2026-111076 https://cve.radiocsirt.org/vuln/euvd-2026-111076 EUVD-2026-111076 https://cve.radiocsirt.org/vuln/euvd-2026-111076 fkie_cve-2012-2395 https://cve.radiocsirt.org/vuln/fkie_cve-2012-2395 <p>Incomplete blacklist vulnerability in action_power.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the power_system method in the xmlrpc API.</p> <p>Incomplete blacklist vulnerability in action_power.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the power_system method in the xmlrpc API.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-2395 GHSA-g34c-mg6m-xvxj — Cobbler subject to Command Injection https://cve.radiocsirt.org/vuln/ghsa-g34c-mg6m-xvxj <p><strong>Affected:</strong> PyPI: cobbler</p> <p>A Command Injection in action_power.py in Cobbler prior to v2.6.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the power_system method in the xmlrpc API.</p> <p><strong>Affected:</strong> PyPI: cobbler</p> <p>A Command Injection in action_power.py in Cobbler prior to v2.6.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the power_system method in the xmlrpc API.</p> https://cve.radiocsirt.org/vuln/ghsa-g34c-mg6m-xvxj gsd-2012-2395 https://cve.radiocsirt.org/vuln/gsd-2012-2395 gsd-2012-2395 https://cve.radiocsirt.org/vuln/gsd-2012-2395 openSUSE-SU-2021:0046-1 — Security update for cobbler https://cve.radiocsirt.org/vuln/opensuse-su-2021:0046-1 <p>Security update for cobbler</p> <p>Security update for cobbler</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:0046-1 PYSEC-2026-792 — Cobbler subject to Command Injection https://cve.radiocsirt.org/vuln/pysec-2026-792 <p><strong>Affected:</strong> PyPI: cobbler</p> <p>A Command Injection in action_power.py in Cobbler prior to v2.6.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the power_system method in the xmlrpc API.</p> <p><strong>Affected:</strong> PyPI: cobbler</p> <p>A Command Injection in action_power.py in Cobbler prior to v2.6.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the power_system method in the xmlrpc API.</p> https://cve.radiocsirt.org/vuln/pysec-2026-792 RHSA-2012:1060 — Red Hat Security Advisory: cobbler security update https://cve.radiocsirt.org/vuln/rhsa-2012:1060 <p>cobbler: command injection flaw in the power management XML-RPC API</p> <p>cobbler: command injection flaw in the power management XML-RPC API</p> https://cve.radiocsirt.org/vuln/rhsa-2012:1060 Withdrawn: UBUNTU-CVE-2012-2395 https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-2395 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: cobbler, Ubuntu:16.04:LTS: cobbler</p> <p>Incomplete blacklist vulnerability in action_power.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the power_system method in the xmlrpc API.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: cobbler, Ubuntu:16.04:LTS: cobbler</p> <p>Incomplete blacklist vulnerability in action_power.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the power_system method in the xmlrpc API.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-2395