Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:22:20 +0000 EUVD-2026-113439 https://cve.radiocsirt.org/vuln/euvd-2026-113439 EUVD-2026-113439 https://cve.radiocsirt.org/vuln/euvd-2026-113439 fkie_cve-2012-6119 https://cve.radiocsirt.org/vuln/fkie_cve-2012-6119 <p>Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.</p> <p>Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-6119 GHSA-jffh-2rxm-9wjg https://cve.radiocsirt.org/vuln/ghsa-jffh-2rxm-9wjg <p>Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.</p> <p>Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.</p> https://cve.radiocsirt.org/vuln/ghsa-jffh-2rxm-9wjg gsd-2012-6119 https://cve.radiocsirt.org/vuln/gsd-2012-6119 gsd-2012-6119 https://cve.radiocsirt.org/vuln/gsd-2012-6119 RHSA-2013:0686 — Red Hat Security Advisory: Subscription Asset Manager 1.2.1 update https://cve.radiocsirt.org/vuln/rhsa-2013:0686 <p>Candlepin: bootstrap RPM deploys CA certificate file with mode 666 Candlepin: Re-enable manifest signature checking rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template rubygem-rack: Timing attack in cookie sessions rubygem-json: Denial of Service and SQL Injection rubygem-activerecord/rubygem-activemodel: circumvention of attr_protected Katello: Notifications page Username XSS</p> <p>Candlepin: bootstrap RPM deploys CA certificate file with mode 666 Candlepin: Re-enable manifest signature checking rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template rubygem-rack: Timing attack in cookie sessions rubygem-json: Denial of Service and SQL Injection rubygem-activerecord/rubygem-activemodel: circumvention of attr_protected Katello: Notifications page Username XSS</p> https://cve.radiocsirt.org/vuln/rhsa-2013:0686