VYPR

Satellite

by Red Hat

Source repositories

CVEs (256)

  • CVE-2018-2602MedJan 18, 2018
    Sun Corporation
    Java SE
    risk 0.29cvss 4.5epss 0.01

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2026-4324MedMar 17, 2026
    Red Hat
    Satellite
    risk 0.28cvss 5.4epss 0.00

    A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sort_by parameter of the /api/hosts/bootc_images API endpoint. This can…

  • CVE-2019-10136MedJul 2, 2019
    Spacewalkproject
    Spacewalk
    risk 0.28cvss 4.3epss 0.01

    It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum.

  • CVE-2019-7317MedFeb 4, 2019
    Libpng
    Libpng
    risk 0.28cvss 5.3epss 0.09

    png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

  • CVE-2017-7514MedJul 30, 2018
    Red Hat
    Satellite
    risk 0.28cvss 4.3epss 0.01

    A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perform XSS attacks against other Satellite users.

  • CVE-2018-2940MedJul 18, 2018
    Sun Corporation
    Java SE
    risk 0.28cvss 4.3epss 0.03

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with…

  • CVE-2018-2800MedApr 19, 2018
    Sun Corporation
    Java SE
    risk 0.28cvss 4.2epss 0.05

    Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple…

  • CVE-2018-2678MedJan 18, 2018
    Sun Corporation
    Java SE
    risk 0.28cvss 4.3epss 0.05

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows…

  • CVE-2018-2677MedJan 18, 2018
    Sun Corporation
    Java SE
    risk 0.28cvss 4.3epss 0.05

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2018-2663MedJan 18, 2018
    Sun Corporation
    Java SE
    risk 0.28cvss 4.3epss 0.05

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows…

  • CVE-2018-2588MedJan 18, 2018
    Sun Corporation
    Java SE
    risk 0.28cvss 4.3epss 0.03

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: LDAP). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows low…

  • CVE-2017-10105MedAug 8, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.28cvss 4.3epss 0.02

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to…

  • CVE-2015-0284MedApr 14, 2016
    Red Hat
    Satellite
    risk 0.28cvss 5.4epss 0.01

    Cross-site scripting (XSS) vulnerability in spacewalk-java in Spacewalk and Red Hat Satellite 5.7 allows remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the XMLRPC API, involving user details. NOTE: this vulnerability exists because of…

  • CVE-2011-3344MedFeb 5, 2014
    Red Hat
    Spacewalk
    risk 0.28cvss 5.4epss 0.01

    A flaw was found in Spacewalk. A remote attacker can exploit a cross-site scripting (XSS) vulnerability in the Lookup Login/Password form by injecting arbitrary web script or HTML via the URI. This can lead to information disclosure or unauthorized actions within the user's…

  • CVE-2019-2996MedOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.27cvss 4.2epss 0.02

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment). The supported version that is affected is Java SE: 8u221; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…

  • CVE-2015-5233MedApr 11, 2016
    Theforeman
    Foreman
    risk 0.27cvss 4.2epss 0.01

    Foreman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which allows (1) remote authenticated users with the view_reports permission to read reports from arbitrary hosts or (2) remote authenticated users with the destroy_reports permission to…

  • CVE-2017-10295MedOct 19, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.26cvss 4.0epss 0.02

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows…

  • CVE-2019-2992LowOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.24cvss 3.7epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2019-2988LowOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.24cvss 3.7epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2019-2983LowOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with…

Page 10 of 13