Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 17:29:55 +0000 cnvd-2018-10177 https://cve.radiocsirt.org/vuln/cnvd-2018-10177 cnvd-2018-10177 https://cve.radiocsirt.org/vuln/cnvd-2018-10177 EUVD-2026-87957 https://cve.radiocsirt.org/vuln/euvd-2026-87957 EUVD-2026-87957 https://cve.radiocsirt.org/vuln/euvd-2026-87957 fkie_cve-2016-9599 https://cve.radiocsirt.org/vuln/fkie_cve-2016-9599 <p>puppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the IPtables rules management, which allowed the creation of TCP/UDP rules with empty port values. If SSL is enabled, a malicious user could use these open ports to gain access to unauthorized resources.</p> <p>puppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the IPtables rules management, which allowed the creation of TCP/UDP rules with empty port values. If SSL is enabled, a malicious user could use these open ports to gain access to unauthorized resources.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-9599 GHSA-f29f-jrc4-qmh5 https://cve.radiocsirt.org/vuln/ghsa-f29f-jrc4-qmh5 <p>puppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the IPtables rules management, which allowed the creation of TCP/UDP rules with empty port values. If SSL is enabled, a malicious user could use these open ports to gain access to unauthorized resources.</p> <p>puppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the IPtables rules management, which allowed the creation of TCP/UDP rules with empty port values. If SSL is enabled, a malicious user could use these open ports to gain access to unauthorized resources.</p> https://cve.radiocsirt.org/vuln/ghsa-f29f-jrc4-qmh5 gsd-2016-9599 https://cve.radiocsirt.org/vuln/gsd-2016-9599 gsd-2016-9599 https://cve.radiocsirt.org/vuln/gsd-2016-9599 RHSA-2017:0025 — Red Hat Security Advisory: puppet-tripleo security update https://cve.radiocsirt.org/vuln/rhsa-2017:0025 <p>puppet-tripleo: if ssl is enabled, traffic is open on both undercloud and overcloud</p> <p>puppet-tripleo: if ssl is enabled, traffic is open on both undercloud and overcloud</p> https://cve.radiocsirt.org/vuln/rhsa-2017:0025