Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2015-7224 |
|
Authentication Bypass in puppet (CVE-2015-7224)
authentication bypass in puppet (CVE-2015-7224). Successful exploitation can lead to full system takeover.
|
| CVE-2015-4100 |
|
Vulnerability in puppet (CVE-2015-4100)
vulnerability in puppet (CVE-2015-4100). Confidential information can be exposed externally.
|
| CVE-2015-8470 |
|
Information Disclosure in puppet (CVE-2015-8470)
vulnerability in puppet (CVE-2015-8470). Confidential information can be exposed externally.
|
| CVE-2015-6502 |
|
Cross-Site Scripting (XSS) in puppet (CVE-2015-6502)
cross-site scripting in puppet (CVE-2015-6502). Risk of unauthorized operations or information disclosure.
|
| CVE-2014-3250 |
|
Vulnerability in apache (CVE-2014-3250)
vulnerability in apache (CVE-2014-3250). Confidential information can be exposed externally.
|
| CVE-2016-5713 |
|
Code Injection in puppet (CVE-2016-5713)
code injection in puppet (CVE-2016-5713). Successful exploitation can lead to full system takeover.
|
| CVE-2016-5714 |
|
Vulnerability in puppet (CVE-2016-5714)
vulnerability in puppet (CVE-2016-5714). Successful exploitation can lead to full system takeover.
|
| CVE-2017-2299 |
|
Vulnerability in apache (CVE-2017-2299)
vulnerability in apache (CVE-2017-2299). Confidential information can be exposed externally. Exploitable via ``ssl_ca``.
|
| CVE-2016-5716 |
|
Vulnerability in puppet (CVE-2016-5716)
vulnerability in puppet (CVE-2016-5716). Successful exploitation can lead to full system takeover.
|
| CVE-2017-7529 |
|
Vulnerability in nginx (CVE-2017-7529)
vulnerability in nginx (CVE-2017-7529). Confidential information can be exposed externally.
|
| CVE-2017-2295 |
|
Unsafe Deserialization in deserialization (CVE-2017-2295)
vulnerability in deserialization (CVE-2017-2295). Confidential information can be exposed externally.
|
| CVE-2017-2294 |
|
Information Disclosure in puppet (CVE-2017-2294)
vulnerability in puppet (CVE-2017-2294). Confidential information can be exposed externally.
|
| CVE-2017-2298 |
|
Vulnerability in puppet (CVE-2017-2298)
vulnerability in puppet (CVE-2017-2298). Data can be tampered with by attackers.
|
| CVE-2017-2292 |
|
Unsafe Deserialization in puppet (CVE-2017-2292)
vulnerability in puppet (CVE-2017-2292). Confidential information can be exposed externally.
|
| CVE-2017-2290 |
|
Vulnerability in puppet (CVE-2017-2290)
vulnerability in puppet (CVE-2017-2290). Successful exploitation can lead to full system takeover.
|
| CVE-2016-2788 |
|
Vulnerability in puppet (CVE-2016-2788)
vulnerability in puppet (CVE-2016-2788). Successful exploitation can lead to full system takeover.
|
| CVE-2016-2787 |
|
Vulnerability in puppet (CVE-2016-2787)
vulnerability in puppet (CVE-2016-2787). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-9686 |
|
Vulnerability in puppet (CVE-2016-9686)
vulnerability in puppet (CVE-2016-9686). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-5715 |
|
Open Redirect in puppet (CVE-2016-5715)
vulnerability in puppet (CVE-2016-5715). Risk of unauthorized operations or information disclosure.
|