https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:22:07 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-99274 EUVD-2026-99274 https://cve.radiocsirt.org/vuln/euvd-2026-99274 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3486 <p>The (1) shell_exec function in lib/util/MiqSshUtilV1.rb and (2) temp_cmd_file function in lib/util/MiqSshUtilV2.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allow local users to execute arbitrary commands via a symlink attack on a temporary file with a predictable name.</p> <p>The (1) shell_exec function in lib/util/MiqSshUtilV1.rb and (2) temp_cmd_file function in lib/util/MiqSshUtilV2.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allow local users to execute arbitrary commands via a symlink attack on a temporary file with a predictable name.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3486 https://cve.radiocsirt.org/vuln/ghsa-4r83-3x2w-gg64 <p>The (1) shell_exec function in lib/util/MiqSshUtilV1.rb and (2) temp_cmd_file function in lib/util/MiqSshUtilV2.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allow local users to execute arbitrary commands via a symlink attack on a temporary file with a predictable name.</p> <p>The (1) shell_exec function in lib/util/MiqSshUtilV1.rb and (2) temp_cmd_file function in lib/util/MiqSshUtilV2.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allow local users to execute arbitrary commands via a symlink attack on a temporary file with a predictable name.</p> https://cve.radiocsirt.org/vuln/ghsa-4r83-3x2w-gg64 https://cve.radiocsirt.org/vuln/gsd-2014-3486 gsd-2014-3486 https://cve.radiocsirt.org/vuln/gsd-2014-3486 https://cve.radiocsirt.org/vuln/rhsa-2014:0816 <p>rubygem-actionpack: directory traversal issue CFME: reflected XSS in several places due to missing JavaScript escaping CFME: app/controllers/application_controller.rb wait_for_task DoS CFME: root password is written to evm.log when entered during VM provisioning CFME: CSRF protection vulnerability in referrer header CFME: SSH Utility insecure tmp file creation leading to code execution as root CFME: Default salt value in miq-password.rb</p> <p>rubygem-actionpack: directory traversal issue CFME: reflected XSS in several places due to missing JavaScript escaping CFME: app/controllers/application_controller.rb wait_for_task DoS CFME: root password is written to evm.log when entered during VM provisioning CFME: CSRF protection vulnerability in referrer header CFME: SSH Utility insecure tmp file creation leading to code execution as root CFME: Default salt value in miq-password.rb</p> https://cve.radiocsirt.org/vuln/rhsa-2014:0816