https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:07:41 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-49794 EUVD-2026-49794 https://cve.radiocsirt.org/vuln/euvd-2026-49794 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3891 <p>It was discovered that a world-readable log file belonging to Candlepin component of Red Hat Satellite 6.4 leaked the credentials of the Candlepin database. A malicious user with local access to a Satellite host can use those credentials to modify the database and prevent Satellite from fetching package updates, thus preventing all Satellite hosts from accessing those updates.</p> <p>It was discovered that a world-readable log file belonging to Candlepin component of Red Hat Satellite 6.4 leaked the credentials of the Candlepin database. A malicious user with local access to a Satellite host can use those credentials to modify the database and prevent Satellite from fetching package updates, thus preventing all Satellite hosts from accessing those updates.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-3891 https://cve.radiocsirt.org/vuln/ghsa-457f-xp3m-rv66 <p>It was discovered that a world-readable log file belonging to Candlepin component of Red Hat Satellite 6.4 leaked the credentials of the Candlepin database. A malicious user with local access to a Satellite host can use those credentials to modify the database and prevent Satellite from fetching package updates, thus preventing all Satellite hosts from accessing those updates.</p> <p>It was discovered that a world-readable log file belonging to Candlepin component of Red Hat Satellite 6.4 leaked the credentials of the Candlepin database. A malicious user with local access to a Satellite host can use those credentials to modify the database and prevent Satellite from fetching package updates, thus preventing all Satellite hosts from accessing those updates.</p> https://cve.radiocsirt.org/vuln/ghsa-457f-xp3m-rv66 https://cve.radiocsirt.org/vuln/gsd-2019-3891 gsd-2019-3891 https://cve.radiocsirt.org/vuln/gsd-2019-3891 https://cve.radiocsirt.org/vuln/rhsa-2019:1222 <p>RESTEasy: Abuse of GZIPInterceptor in RESTEasy can lead to denial of service attack pulp: Improper path parsing leads to overwriting of iso repositories foreman: Persisted XSS on all pages that use breadcrumbs foreman: stored XSS in success notification after entity creation katello: stored XSS in subscriptions and repositories pages candlepin: credentials exposure through log files</p> <p>RESTEasy: Abuse of GZIPInterceptor in RESTEasy can lead to denial of service attack pulp: Improper path parsing leads to overwriting of iso repositories foreman: Persisted XSS on all pages that use breadcrumbs foreman: stored XSS in success notification after entity creation katello: stored XSS in subscriptions and repositories pages candlepin: credentials exposure through log files</p> https://cve.radiocsirt.org/vuln/rhsa-2019:1222