2 matches found
CVE-2012-6685
Nokogiri before 1.5.4 is vulnerable to XXE attacks
CVE-2014-0183
Versions of Katello as shipped with Red Hat Subscription Asset Manager 1.4 are vulnerable to a XSS via HTML in the systems name when registering.