https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:43:30 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-99229 EUVD-2026-99229 https://cve.radiocsirt.org/vuln/euvd-2026-99229 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3489 <p>lib/util/miq-password.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 uses a hard-coded salt, which makes it easier for remote attackers to guess passwords via a brute force attack.</p> <p>lib/util/miq-password.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 uses a hard-coded salt, which makes it easier for remote attackers to guess passwords via a brute force attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3489 https://cve.radiocsirt.org/vuln/ghsa-cw3x-m8xc-mqp9 <p>lib/util/miq-password.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 uses a hard-coded salt, which makes it easier for remote attackers to guess passwords via a brute force attack.</p> <p>lib/util/miq-password.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 uses a hard-coded salt, which makes it easier for remote attackers to guess passwords via a brute force attack.</p> https://cve.radiocsirt.org/vuln/ghsa-cw3x-m8xc-mqp9 https://cve.radiocsirt.org/vuln/gsd-2014-3489 gsd-2014-3489 https://cve.radiocsirt.org/vuln/gsd-2014-3489 https://cve.radiocsirt.org/vuln/rhsa-2014:0816 <p>rubygem-actionpack: directory traversal issue CFME: reflected XSS in several places due to missing JavaScript escaping CFME: app/controllers/application_controller.rb wait_for_task DoS CFME: root password is written to evm.log when entered during VM provisioning CFME: CSRF protection vulnerability in referrer header CFME: SSH Utility insecure tmp file creation leading to code execution as root CFME: Default salt value in miq-password.rb</p> <p>rubygem-actionpack: directory traversal issue CFME: reflected XSS in several places due to missing JavaScript escaping CFME: app/controllers/application_controller.rb wait_for_task DoS CFME: root password is written to evm.log when entered during VM provisioning CFME: CSRF protection vulnerability in referrer header CFME: SSH Utility insecure tmp file creation leading to code execution as root CFME: Default salt value in miq-password.rb</p> https://cve.radiocsirt.org/vuln/rhsa-2014:0816