https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:15:32 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-18618 cnvd-2017-18618 https://cve.radiocsirt.org/vuln/cnvd-2017-18618 https://cve.radiocsirt.org/vuln/euvd-2026-93146 EUVD-2026-93146 https://cve.radiocsirt.org/vuln/euvd-2026-93146 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5152 <p>Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the require_ssl setting is set to true, which allows remote attackers to obtain user credentials via a man-in-the-middle attack.</p> <p>Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the require_ssl setting is set to true, which allows remote attackers to obtain user credentials via a man-in-the-middle attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-5152 https://cve.radiocsirt.org/vuln/ghsa-f78j-3cq3-m6p4 <p>Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the require_ssl setting is set to true, which allows remote attackers to obtain user credentials via a man-in-the-middle attack.</p> <p>Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the require_ssl setting is set to true, which allows remote attackers to obtain user credentials via a man-in-the-middle attack.</p> https://cve.radiocsirt.org/vuln/ghsa-f78j-3cq3-m6p4 https://cve.radiocsirt.org/vuln/gsd-2015-5152 gsd-2015-5152 https://cve.radiocsirt.org/vuln/gsd-2015-5152 https://cve.radiocsirt.org/vuln/rhba-2016:1501 <p>Foreman: API permits HTTP requests when require_ssl is enabled foreman: XSS in hidden parameter value switcher pulp: Node certificate containing private key stored in world-readable file pulp: Insecure temporary file used when generating certificate for Pulp Nodes pulp: Race condition when generating RSA keys for authenticating messages between server and consumers pulp: Agent certificate containing private key is stored in world-readable file foreman: Missing input validation in Smart Proxy allows RCE via TFTP file variant parameter</p> <p>Foreman: API permits HTTP requests when require_ssl is enabled foreman: XSS in hidden parameter value switcher pulp: Node certificate containing private key stored in world-readable file pulp: Insecure temporary file used when generating certificate for Pulp Nodes pulp: Race condition when generating RSA keys for authenticating messages between server and consumers pulp: Agent certificate containing private key is stored in world-readable file foreman: Missing input validation in Smart Proxy allows RCE via TFTP file variant parameter</p> https://cve.radiocsirt.org/vuln/rhba-2016:1501