https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:43:36 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-02381 cnvd-2016-02381 https://cve.radiocsirt.org/vuln/cnvd-2016-02381 https://cve.radiocsirt.org/vuln/euvd-2026-83768 EUVD-2026-83768 https://cve.radiocsirt.org/vuln/euvd-2026-83768 https://cve.radiocsirt.org/vuln/fkie_cve-2016-3693 <p>The Safemode gem before 1.2.4 for Ruby, when initialized with a delegate object that is a Rails controller, allows context-dependent attackers to obtain sensitive information via the inspect method.</p> <p>The Safemode gem before 1.2.4 for Ruby, when initialized with a delegate object that is a Rails controller, allows context-dependent attackers to obtain sensitive information via the inspect method.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-3693 https://cve.radiocsirt.org/vuln/ghsa-c92m-rrrc-q5wf <p><strong>Affected:</strong> RubyGems: safemode</p> <p>The Safemode gem before 1.2.4 for Ruby, when initialized with a delegate object that is a Rails controller, allows context-dependent attackers to obtain sensitive information via the inspect method.</p> <p><strong>Affected:</strong> RubyGems: safemode</p> <p>The Safemode gem before 1.2.4 for Ruby, when initialized with a delegate object that is a Rails controller, allows context-dependent attackers to obtain sensitive information via the inspect method.</p> https://cve.radiocsirt.org/vuln/ghsa-c92m-rrrc-q5wf https://cve.radiocsirt.org/vuln/gsd-2016-3693 gsd-2016-3693 https://cve.radiocsirt.org/vuln/gsd-2016-3693 https://cve.radiocsirt.org/vuln/rhsa-2018:0336 <p>rubygem-will_paginate: XSS vulnerabilities foreman: models with a &#39;belongs_to&#39; association to an Organization do not verify association belongs to that Organization V8: integer overflow leading to buffer overflow in Zone::New foreman: inspect in a provisioning template exposes sensitive controller information pulp: Leakage of CA key in pulp-qpid-ssl-cfg pulp: Unsafe use of bash $RANDOM for NSS DB password and seed foreman: privilege escalation through Organization and Locations API foreman: Information disclosure in provisioning template previews foreman: inside discovery-debug, the root password is displayed in plaintext foreman: Persistent XSS in Foreman remote execution plugin foreman: Foreman information leak through unauthorized multiple_checkboxes helper foreman: Information leak through organizations and locations feature foreman: Stored XSS vulnerability in remote execution plugin foreman: Stored XSS in org/loc wizard foreman: Stored XSS via organization/location with HTML in name foreman-debug: missing obfuscation of sensitive information katello-debug: Possible symlink attacks due to use of predictable file names puppet: Unsafe YAML deserialization rubygem-hammer_cli: no verification of API server&#39;s SSL certificate foreman: Image password leak Interconnect: Denial of Service vulnerability in Red Hat JBoss AMQ Interconnect katello: SQL inject in errata-related REST API</p> <p>rubygem-will_paginate: XSS vulnerabilities foreman: models with a &#39;belongs_to&#39; association to an Organization do not verify association belongs to that Organization V8: integer overflow leading to buffer overflow in Zone::New foreman: inspect in a provisioning template exposes sensitive controller information pulp: Leakage of CA key in pulp-qpid-ssl-cfg pulp: Unsafe use of bash $RANDOM for NSS DB password and seed foreman: privilege escalation through Organization and Locations API foreman: Information disclosure in provisioning template previews foreman: inside discovery-debug, the root password is displayed in plaintext foreman: Persistent XSS in Foreman remote execution plugin foreman: Foreman information leak through unauthorized multiple_checkboxes helper foreman: Information leak through organizations and locations feature foreman: Stored XSS vulnerability in remote execution plugin foreman: Stored XSS in org/loc wizard foreman: Stored XSS via organization/location with HTML in name foreman-debug: missing obfuscation of sensitive information katello-debug: Possible symlink attacks due to use of predictable file names puppet: Unsafe YAML deserialization rubygem-hammer_cli: no verification of API server&#39;s SSL certificate foreman: Image password leak Interconnect: Denial of Service vulnerability in Red Hat JBoss AMQ Interconnect katello: SQL inject in errata-related REST API</p> https://cve.radiocsirt.org/vuln/rhsa-2018:0336