https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:25:57 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-03444 cnvd-2016-03444 https://cve.radiocsirt.org/vuln/cnvd-2016-03444 https://cve.radiocsirt.org/vuln/euvd-2026-83797 EUVD-2026-83797 https://cve.radiocsirt.org/vuln/euvd-2026-83797 https://cve.radiocsirt.org/vuln/fkie_cve-2016-3728 <p>Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman before 1.10.4 and 1.11.x before 1.11.2 allows remote attackers to execute arbitrary code via the PXE template type portion of the PATH_INFO to tftp/.</p> <p>Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman before 1.10.4 and 1.11.x before 1.11.2 allows remote attackers to execute arbitrary code via the PXE template type portion of the PATH_INFO to tftp/.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-3728 https://cve.radiocsirt.org/vuln/ghsa-p492-9h7w-9x72 <p>Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman before 1.10.4 and 1.11.x before 1.11.2 allows remote attackers to execute arbitrary code via the PXE template type portion of the PATH_INFO to tftp/.</p> <p>Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman before 1.10.4 and 1.11.x before 1.11.2 allows remote attackers to execute arbitrary code via the PXE template type portion of the PATH_INFO to tftp/.</p> https://cve.radiocsirt.org/vuln/ghsa-p492-9h7w-9x72 https://cve.radiocsirt.org/vuln/gsd-2016-3728 gsd-2016-3728 https://cve.radiocsirt.org/vuln/gsd-2016-3728 https://cve.radiocsirt.org/vuln/rhba-2016:1501 <p>Foreman: API permits HTTP requests when require_ssl is enabled foreman: XSS in hidden parameter value switcher pulp: Node certificate containing private key stored in world-readable file pulp: Insecure temporary file used when generating certificate for Pulp Nodes pulp: Race condition when generating RSA keys for authenticating messages between server and consumers pulp: Agent certificate containing private key is stored in world-readable file foreman: Missing input validation in Smart Proxy allows RCE via TFTP file variant parameter</p> <p>Foreman: API permits HTTP requests when require_ssl is enabled foreman: XSS in hidden parameter value switcher pulp: Node certificate containing private key stored in world-readable file pulp: Insecure temporary file used when generating certificate for Pulp Nodes pulp: Race condition when generating RSA keys for authenticating messages between server and consumers pulp: Agent certificate containing private key is stored in world-readable file foreman: Missing input validation in Smart Proxy allows RCE via TFTP file variant parameter</p> https://cve.radiocsirt.org/vuln/rhba-2016:1501