https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 02:52:41 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-99403 EUVD-2026-99403 https://cve.radiocsirt.org/vuln/euvd-2026-99403 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3653 <p>Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted provisioning template.</p> <p>Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted provisioning template.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3653 https://cve.radiocsirt.org/vuln/ghsa-46hx-7mg5-6vx7 <p>Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted provisioning template.</p> <p>Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted provisioning template.</p> https://cve.radiocsirt.org/vuln/ghsa-46hx-7mg5-6vx7 https://cve.radiocsirt.org/vuln/gsd-2014-3653 gsd-2014-3653 https://cve.radiocsirt.org/vuln/gsd-2014-3653 https://cve.radiocsirt.org/vuln/rhsa-2015:1591 <p>TLS: MITM attacks via session renegotiation python-oauth2: _check_signature() ignores the nonce value when validating signed urls python-oauth2: Uses poor PRNG in nonce foreman: cross-site scripting (XSS) flaw in template preview screen foreman: lack of SSL certificate validation when performing LDAPS authentication foreman: API not scoping resources to taxonomies foreman: the _session_id cookie is issued without the Secure flag foreman: edit_users permission allows changing of admin passwords</p> <p>TLS: MITM attacks via session renegotiation python-oauth2: _check_signature() ignores the nonce value when validating signed urls python-oauth2: Uses poor PRNG in nonce foreman: cross-site scripting (XSS) flaw in template preview screen foreman: lack of SSL certificate validation when performing LDAPS authentication foreman: API not scoping resources to taxonomies foreman: the _session_id cookie is issued without the Secure flag foreman: edit_users permission allows changing of admin passwords</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1591