https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 10:48:56 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-99346 EUVD-2026-99346 https://cve.radiocsirt.org/vuln/euvd-2026-99346 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3590 <p>Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token in the logout action. Therefore, an attacker can log out a user by having them view specially crafted content.</p> <p>Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token in the logout action. Therefore, an attacker can log out a user by having them view specially crafted content.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3590 https://cve.radiocsirt.org/vuln/ghsa-246c-q58f-ccm9 <p>Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token in the logout action. Therefore, an attacker can log out a user by having them view specially crafted content.</p> <p>Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token in the logout action. Therefore, an attacker can log out a user by having them view specially crafted content.</p> https://cve.radiocsirt.org/vuln/ghsa-246c-q58f-ccm9 https://cve.radiocsirt.org/vuln/gsd-2014-3590 gsd-2014-3590 https://cve.radiocsirt.org/vuln/gsd-2014-3590 https://cve.radiocsirt.org/vuln/rhsa-2015:1592 <p>python-oauth2: _check_signature() ignores the nonce value when validating signed urls python-oauth2: Uses poor PRNG in nonce rhn_satellite_6: cross-site request forgery (CSRF) can force logout foreman: cross-site scripting (XSS) flaw in template preview screen foreman: lack of SSL certificate validation when performing LDAPS authentication foreman: API not scoping resources to taxonomies foreman: the _session_id cookie is issued without the Secure flag foreman: edit_users permission allows changing of admin passwords</p> <p>python-oauth2: _check_signature() ignores the nonce value when validating signed urls python-oauth2: Uses poor PRNG in nonce rhn_satellite_6: cross-site request forgery (CSRF) can force logout foreman: cross-site scripting (XSS) flaw in template preview screen foreman: lack of SSL certificate validation when performing LDAPS authentication foreman: API not scoping resources to taxonomies foreman: the _session_id cookie is issued without the Secure flag foreman: edit_users permission allows changing of admin passwords</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1592