https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:17:04 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-09724 bdu:2015-09724 https://cve.radiocsirt.org/vuln/bdu:2015-09724 https://cve.radiocsirt.org/vuln/euvd-2026-105517 EUVD-2026-105517 https://cve.radiocsirt.org/vuln/euvd-2026-105517 https://cve.radiocsirt.org/vuln/fkie_cve-2013-1640 <p>The (1) template and (2) inline_template functions in the master server in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2 allows remote authenticated users to execute arbitrary code via a crafted catalog request.</p> <p>The (1) template and (2) inline_template functions in the master server in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2 allows remote authenticated users to execute arbitrary code via a crafted catalog request.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-1640 https://cve.radiocsirt.org/vuln/ghsa-86qh-qpc6-jff7 <p>The (1) template and (2) inline_template functions in the master server in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2 allows remote authenticated users to execute arbitrary code via a crafted catalog request.</p> <p>The (1) template and (2) inline_template functions in the master server in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2 allows remote authenticated users to execute arbitrary code via a crafted catalog request.</p> https://cve.radiocsirt.org/vuln/ghsa-86qh-qpc6-jff7 https://cve.radiocsirt.org/vuln/gsd-2013-1640 gsd-2013-1640 https://cve.radiocsirt.org/vuln/gsd-2013-1640 https://cve.radiocsirt.org/vuln/rhsa-2013:0710 <p>Puppet: Directory /var/log/puppet is world readable Puppet: catalog request code execution Puppet: HTTP GET request catalog retrieval Puppet: SSL protocol downgrade Puppet: HTTP PUT report saving code execution vulnerability Puppet: default auth.conf allows authenticated node to submit a report for any other node</p> <p>Puppet: Directory /var/log/puppet is world readable Puppet: catalog request code execution Puppet: HTTP GET request catalog retrieval Puppet: SSL protocol downgrade Puppet: HTTP PUT report saving code execution vulnerability Puppet: default auth.conf allows authenticated node to submit a report for any other node</p> https://cve.radiocsirt.org/vuln/rhsa-2013:0710