12 matches found
EUVD-2014-0130
Malware in sbrugna...
EUVD-2014-0127
Malware in sbrugna...
CVE-2014-0026
katello-headpin is vulnerable to CSRF in REST API...
Cross site request forgery (csrf)
katello-headpin is vulnerable to CSRF in REST API...
CVE-2014-0026
CVE-2014-0026 applies to katello-headpin and is due to a CSRF vulnerability in the REST API. The issue is listed with CVSS vectors (2.0: AV:N/AC:M/Au:N/C:N/I:P/A:N; 3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) indicating network access, no confidentiality impact, partial integrity impact, a...
CVE-2014-0026
katello-headpin is vulnerable to CSRF in REST API...
CVE-2014-0026: Cross-Site Request Forgery (CSRF)
katello-headpin is vulnerable to CSRF in REST API...
Red Hat katello-headpin SAM web application cross-site scripting vulnerability
Red Hat katello-headpin is a systems management engine from Red Hat that provides configuration management, subscription management, and content management workflows.SAM web application is one of the SAM management applications. A cross-site scripting vulnerability exists in the SAM web applicati...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the SAM web application in Red Hat katello-headpin allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...
CVE-2014-0029
Multiple cross-site scripting XSS vulnerabilities in the SAM web application in Red Hat katello-headpin allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...
CVE-2014-0029
CVE-2014-0029 affects the SAM web application in Red Hat katello-headpin (the systems management engine). The connected documents describe multiple cross-site scripting (XSS) vulnerabilities in the SAM web app, allowing remote attackers to inject arbitrary web script or HTML via unspecified param...
CVE-2014-0029: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the SAM web application in Red Hat katello-headpin allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...