https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 05:43:34 +0000 https://cve.radiocsirt.org/vuln/cnvd-2015-05678 cnvd-2015-05678 https://cve.radiocsirt.org/vuln/cnvd-2015-05678 https://cve.radiocsirt.org/vuln/euvd-2026-91734 EUVD-2026-91734 https://cve.radiocsirt.org/vuln/euvd-2026-91734 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3235 <p>Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit administrator users and change their passwords via unspecified vectors.</p> <p>Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit administrator users and change their passwords via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-3235 https://cve.radiocsirt.org/vuln/ghsa-5jmw-rjr2-cj2c <p>Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit administrator users and change their passwords via unspecified vectors.</p> <p>Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit administrator users and change their passwords via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/ghsa-5jmw-rjr2-cj2c https://cve.radiocsirt.org/vuln/gsd-2015-3235 gsd-2015-3235 https://cve.radiocsirt.org/vuln/gsd-2015-3235 https://cve.radiocsirt.org/vuln/rhsa-2015:1591 <p>TLS: MITM attacks via session renegotiation python-oauth2: _check_signature() ignores the nonce value when validating signed urls python-oauth2: Uses poor PRNG in nonce foreman: cross-site scripting (XSS) flaw in template preview screen foreman: lack of SSL certificate validation when performing LDAPS authentication foreman: API not scoping resources to taxonomies foreman: the _session_id cookie is issued without the Secure flag foreman: edit_users permission allows changing of admin passwords</p> <p>TLS: MITM attacks via session renegotiation python-oauth2: _check_signature() ignores the nonce value when validating signed urls python-oauth2: Uses poor PRNG in nonce foreman: cross-site scripting (XSS) flaw in template preview screen foreman: lack of SSL certificate validation when performing LDAPS authentication foreman: API not scoping resources to taxonomies foreman: the _session_id cookie is issued without the Secure flag foreman: edit_users permission allows changing of admin passwords</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1591