Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Tag: satellite Clear
ID Title
CVE-2026-13316 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-13316)
SSRF in ssrf (CVE-2026-13316). Confidential information can be exposed externally.
CVE-2026-9073 Vulnerability in redhat (CVE-2026-9073)
vulnerability in redhat (CVE-2026-9073). Confidential information can be exposed externally.
CVE-2026-12112 Authentication Bypass in privilege-escalation (CVE-2026-12112)
authentication bypass in privilege-escalation (CVE-2026-12112). Successful exploitation can lead to full system takeover.
CVE-2026-48864 Out-of-Bounds Write in dos (CVE-2026-48864)
out-of-bounds write in dos (CVE-2026-48864). Successful exploitation can lead to full system takeover.
CVE-2026-9150 Vulnerability in dos (CVE-2026-9150)
vulnerability in dos (CVE-2026-9150). Risk of unauthorized operations or information disclosure.
CVE-2026-9149 Vulnerability in dos (CVE-2026-9149)
vulnerability in dos (CVE-2026-9149). Risk of unauthorized operations or information disclosure. Exploitable via ``repo_add_solv``.
CVE-2023-44487 KEV [KEV] Vulnerability in Ietf golang.org/x/net (CVE-2023-44487)
vulnerability in Ietf golang.org/x/net (CVE-2023-44487). Risk of unauthorized operations or information disclosure. Exploitable via ``Channel``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `0.17.0` or later.
CVE-2019-7317 Use-After-Free in c (CVE-2019-7317)
vulnerability in c (CVE-2019-7317). Risk of unauthorized operations or information disclosure.
CVE-2017-15100 Cross-Site Scripting (XSS) in theforeman (CVE-2017-15100)
cross-site scripting in theforeman (CVE-2017-15100). Risk of unauthorized operations or information disclosure.
CVE-2015-5164 Unsafe Deserialization in pulpproject (CVE-2015-5164)
vulnerability in pulpproject (CVE-2015-5164). Successful exploitation can lead to full system takeover.
CVE-2014-8163 Directory traversal vulnerability in the XMLRPC interface in Red Hat Satellite 5.
Directory traversal vulnerability in the XMLRPC interface in Red Hat Satellite 5.
CVE-2014-8168 Red Hat Satellite 6 allows local users to access mongod and delete pulp_database.
Red Hat Satellite 6 allows local users to access mongod and delete pulp_database.
CVE-2014-0141 Cross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3.
Cross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3.
CVE-2016-4996 Vulnerability in redhat (CVE-2016-4996)
vulnerability in redhat (CVE-2016-4996). Successful exploitation can lead to full system takeover.
CVE-2014-8180 Authentication Bypass in dos (CVE-2014-8180)
authentication bypass in dos (CVE-2014-8180). Risk of unauthorized operations or information disclosure.
CVE-2016-2104 Cross-Site Scripting (XSS) in redhat (CVE-2016-2104)
cross-site scripting in redhat (CVE-2016-2104). Risk of unauthorized operations or information disclosure.
CVE-2017-5929 Unsafe Deserialization in qos (CVE-2017-5929)
vulnerability in qos (CVE-2017-5929). Successful exploitation can lead to full system takeover.
CVE-2016-10165 Out-of-Bounds Read in c (CVE-2016-10165)
vulnerability in c (CVE-2016-10165). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →