https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 22:14:45 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-229151 EUVD-2026-229151 https://cve.radiocsirt.org/vuln/euvd-2026-229151 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4130 <p>A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker&#39;s server by modifying the Referer header in an HTTP request of specific resources in the server.</p> <p>A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker&#39;s server by modifying the Referer header in an HTTP request of specific resources in the server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-4130 https://cve.radiocsirt.org/vuln/ghsa-qq54-c3p8-j5hg <p>A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker&#39;s server by modifying the Referer header in an HTTP request of specific resources in the server.</p> <p>A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker&#39;s server by modifying the Referer header in an HTTP request of specific resources in the server.</p> https://cve.radiocsirt.org/vuln/ghsa-qq54-c3p8-j5hg https://cve.radiocsirt.org/vuln/gsd-2022-4130 gsd-2022-4130 https://cve.radiocsirt.org/vuln/gsd-2022-4130 https://cve.radiocsirt.org/vuln/rhsa-2023:6818 <p>kubeclient: kubeconfig parsing error can lead to MITM attacks openssl: c_rehash script allows command injection openssl: the c_rehash script allows command injection Pulp: Tokens stored in plaintext foreman: OS command injection via ct_command and fcct_command satellite: Blind SSRF via Referer header python-future: remote attackers can cause denial of service via crafted Set-Cookie header from malicious web server golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests rubygem-activerecord: Denial of Service rubygem-rack: denial of service in Content-Disposition parsing rubygem-rack: denial of service in Content-Disposition parsing rubygem-rack: denial of service in Content-Disposition parsing ruby-git: code injection vulnerability ruby-git: code injection vulnerability Foreman: Arbitrary code execution through templates Foreman: Stored cross-site scripting in host tab puppet: Puppet Server ReDoS rubygem-actionpack: Denial of Service in Action Dispatch rubygem-activerecord: SQL Injection rubygem-actionpack: Denial of Service in Action Dispatch rubygem-activesupport: Regular Expression Denial of Service rubygem-globalid: ReDoS vulnerability rubygem-rack: Denial of service in Multipart MIME parsing rubygem-rack: denial of service in header parsing golang: net/http: insufficient sanitization of Host header sqlparse: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service) python-django: Potential bypass o…</p> <p>kubeclient: kubeconfig parsing error can lead to MITM attacks openssl: c_rehash script allows command injection openssl: the c_rehash script allows command injection Pulp: Tokens stored in plaintext foreman: OS command injection via ct_command and fcct_command satellite: Blind SSRF via Referer header python-future: remote attackers can cause denial of service via crafted Set-Cookie header from malicious web server golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests rubygem-activerecord: Denial of Service rubygem-rack: denial of service in Content-Disposition parsing rubygem-rack: denial of service in Content-Disposition parsing rubygem-rack: denial of service in Content-Disposition parsing ruby-git: code injection vulnerability ruby-git: code injection vulnerability Foreman: Arbitrary code execution through templates Foreman: Stored cross-site scripting in host tab puppet: Puppet Server ReDoS rubygem-actionpack: Denial of Service in Action Dispatch rubygem-activerecord: SQL Injection rubygem-actionpack: Denial of Service in Action Dispatch rubygem-activesupport: Regular Expression Denial of Service rubygem-globalid: ReDoS vulnerability rubygem-rack: Denial of service in Multipart MIME parsing rubygem-rack: denial of service in header parsing golang: net/http: insufficient sanitization of Host header sqlparse: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service) python-django: Potential bypass o…</p> https://cve.radiocsirt.org/vuln/rhsa-2023:6818 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2390 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Satellite ausnutzen, um Daten zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Satellite ausnutzen, um Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2390