EUVD-2014-0127

Malware in sbrugna...

EUVD-2014-0130

Malware in sbrugna...

CVE-2014-0026

katello-headpin is vulnerable to CSRF in REST API...

Cross site request forgery (csrf)

katello-headpin is vulnerable to CSRF in REST API...

CVE-2014-0026

CVE-2014-0026 applies to katello-headpin and is due to a CSRF vulnerability in the REST API. The issue is listed with CVSS vectors (2.0: AV:N/AC:M/Au:N/C:N/I:P/A:N; 3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) indicating network access, no confidentiality impact, partial integrity impact, a...

CVE-2014-0026

katello-headpin is vulnerable to CSRF in REST API...

Red Hat katello-headpin SAM web application cross-site scripting vulnerability

Red Hat katello-headpin is a systems management engine from Red Hat that provides configuration management, subscription management, and content management workflows.SAM web application is one of the SAM management applications. A cross-site scripting vulnerability exists in the SAM web applicati...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the SAM web application in Red Hat katello-headpin allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2014-0029

CVE-2014-0029 affects the SAM web application in Red Hat katello-headpin (the systems management engine). The connected documents describe multiple cross-site scripting (XSS) vulnerabilities in the SAM web app, allowing remote attackers to inject arbitrary web script or HTML via unspecified param...

CVE-2014-0029

Multiple cross-site scripting XSS vulnerabilities in the SAM web application in Red Hat katello-headpin allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...