Lucene search
+L

9 matches found

CVE
CVE
•added 2026/08/27 10:22 a.m.•36 views

CVE-2026-81658

Foreman is affected by an authorization flaw in its template revision endpoint , which does not enforce object-level authorization when retrieving audited template revisions. An authenticated, low-privileged user with a template-related permission (e.g., view_ptables) can retrieve historical temp...

6.5CVSS5.7AI score0.0036EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/27 10:22 a.m.•14 views

EUVD-2026-66996

A flaw was found in Foreman. The template revision endpoint does not enforce object-level authorization when retrieving an audited template revision. An authenticated, low privileged user with a template-related permission, such as viewptables, can obtain historical template contents belonging to...

6.5CVSS5.2AI score0.0036EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/27 10:22 a.m.•49 views

CVE-2026-81658 Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup

A flaw was found in Foreman. The template revision endpoint does not enforce object-level authorization when retrieving an audited template revision. An authenticated, low privileged user with a template-related permission, such as viewptables, can obtain historical template contents belonging to...

6.5CVSS0.0036EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/27 12:00 a.m.•26 views

PT-2026-82490

A flaw was found in Foreman. The template revision endpoint does not enforce object-level authorization when retrieving an audited template revision. An authenticated, low privileged user with a template-related permission, such as view ptables, can obtain historical template contents belonging t...

6.5CVSS5.2AI score0.0036EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/27 12:00 a.m.•4 views

CVE-2026-81658: Authorization Bypass Through User-Controlled Key

A flaw was found in Foreman. The template revision endpoint does not enforce object-level authorization when retrieving an audited template revision. An authenticated, low privileged user with a template-related permission, such as viewptables, can obtain historical template contents belonging to...

6.5CVSS5.7AI score0.0036EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2007-6471

Malware in sbrugna...

3.5CVSS6.4AI score0.00756EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2024-52836

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00619EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2007/12/20 11:46 p.m.•7 views

CVE-2007-6505

Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate audit records with an audit-ID of 0 even when the user logging into ssh is not root, which makes it easier for attackers to avoid detection and can make it more difficult to conduct forensics activities...

3.5CVSS5.5AI score0.00756EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/12/20 12:00 a.m.•9 views

CVE-2007-6505: Undefined Security Weakness

Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate audit records with an audit-ID of 0 even when the user logging into ssh is not root, which makes it easier for attackers to avoid detection and can make it more difficult to conduct forensics activities...

3.5CVSS5.8AI score0.00756EPSS
SaveExploits0References2
Rows per page
Query Builder