https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 06:50:01 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-03902 bdu:2020-03902 https://cve.radiocsirt.org/vuln/bdu:2020-03902 https://cve.radiocsirt.org/vuln/cnvd-2020-44408 cnvd-2020-44408 https://cve.radiocsirt.org/vuln/cnvd-2020-44408 https://cve.radiocsirt.org/vuln/euvd-2026-40054 EUVD-2026-40054 https://cve.radiocsirt.org/vuln/euvd-2026-40054 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10779 <p>Red Hat CloudForms 4.7 and 5 leads to insecure direct object references (IDOR) and functional level access control bypass due to missing privilege check. Therefore, if an attacker knows the right criteria, it is possible to access some sensitive data within the CloudForms.</p> <p>Red Hat CloudForms 4.7 and 5 leads to insecure direct object references (IDOR) and functional level access control bypass due to missing privilege check. Therefore, if an attacker knows the right criteria, it is possible to access some sensitive data within the CloudForms.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-10779 https://cve.radiocsirt.org/vuln/gsd-2020-10779 gsd-2020-10779 https://cve.radiocsirt.org/vuln/gsd-2020-10779 https://cve.radiocsirt.org/vuln/rhsa-2020:3358 <p>CloudForms: Cross Site Scripting in report menu title / HTML Code Injection CloudForms: Business logic bypass through widgets CloudForms: Missing functional level access control &amp; IDOR lead to compromise CloudForms: CSV Injection in Orchestration Templates CloudForms: Missing access control leads to escalation of admin group privileges CloudForms: Server-Side Request Forgery (SSRF) in Ansible Tower Provider CloudForms: Out-of-band OS Command Injection through conversion host CloudForms: User Impersonation in the API for OIDC and SAML</p> <p>CloudForms: Cross Site Scripting in report menu title / HTML Code Injection CloudForms: Business logic bypass through widgets CloudForms: Missing functional level access control &amp; IDOR lead to compromise CloudForms: CSV Injection in Orchestration Templates CloudForms: Missing access control leads to escalation of admin group privileges CloudForms: Server-Side Request Forgery (SSRF) in Ansible Tower Provider CloudForms: Out-of-band OS Command Injection through conversion host CloudForms: User Impersonation in the API for OIDC and SAML</p> https://cve.radiocsirt.org/vuln/rhsa-2020:3358