https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:23:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-09786 bdu:2015-09786 https://cve.radiocsirt.org/vuln/bdu:2015-09786 https://cve.radiocsirt.org/vuln/certfr-2014-avi-273 certfr-2014-avi-273 https://cve.radiocsirt.org/vuln/certfr-2014-avi-273 https://cve.radiocsirt.org/vuln/euvd-2026-99070 EUVD-2026-99070 https://cve.radiocsirt.org/vuln/euvd-2026-99070 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3248 <p>Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2) Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so; or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so in puppet/confine.</p> <p>Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2) Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so; or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so in puppet/confine.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3248 https://cve.radiocsirt.org/vuln/ghsa-92v7-pq4h-58j5 <p><strong>Affected:</strong> RubyGems: facter, RubyGems: hiera, RubyGems: puppet, RubyGems: mcollective-client</p> <p>Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) `rubygems/defaults/operating_system.rb`, (2) `Win32API.rb`, (3) `Win32API.so`, (4) `safe_yaml.rb`, (5) `safe_yaml/deep.rb`, or (6) `safe_yaml/deep.so`; or (7) `operatingsystem.rb`, (8) `operatingsystem.so`, (9) `osfamily.rb`, or (10) `osfamily.so` in `puppet/confine`.</p> <p><strong>Affected:</strong> RubyGems: facter, RubyGems: hiera, RubyGems: puppet, RubyGems: mcollective-client</p> <p>Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) `rubygems/defaults/operating_system.rb`, (2) `Win32API.rb`, (3) `Win32API.so`, (4) `safe_yaml.rb`, (5) `safe_yaml/deep.rb`, or (6) `safe_yaml/deep.so`; or (7) `operatingsystem.rb`, (8) `operatingsystem.so`, (9) `osfamily.rb`, or (10) `osfamily.so` in `puppet/confine`.</p> https://cve.radiocsirt.org/vuln/ghsa-92v7-pq4h-58j5 https://cve.radiocsirt.org/vuln/gsd-2014-3248 gsd-2014-3248 https://cve.radiocsirt.org/vuln/gsd-2014-3248 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10565-1 <p>ruby2.2-rubygem-facter-2.4.6-2.1 on GA media</p> <p>ruby2.2-rubygem-facter-2.4.6-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10565-1 https://cve.radiocsirt.org/vuln/suse-ru-2015:0696-1 <p>Security update for puppet</p> <p>Security update for puppet</p> https://cve.radiocsirt.org/vuln/suse-ru-2015:0696-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3248 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: puppet, Ubuntu:14.04:LTS: facter</p> <p>Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2) Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so; or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so in puppet/confine.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: puppet, Ubuntu:14.04:LTS: facter</p> <p>Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2) Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so; or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so in puppet/confine.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3248