Redhat

Satellite

228 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2016-0363

  • EPSS 0.68%
  • Veröffentlicht 03.06.2016 14:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) uses the invoke...

6.8

CVE-2016-0264

  • EPSS 12.8%
  • Veröffentlicht 24.05.2016 15:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) allows re...

10

CVE-2016-3427

Warnung
  • EPSS 93.62%
  • Veröffentlicht 21.04.2016 11:00:21
  • Zuletzt bearbeitet 22.10.2025 00:15:51

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

6.1

CVE-2016-3079

  • EPSS 0.43%
  • Veröffentlicht 14.04.2016 14:59:08
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Spacewalk and Red Hat Satellite 5.7 allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to systems/SystemEntitlements.do; (2) the label parameter to ...

6.1

CVE-2016-2103

  • EPSS 0.24%
  • Veröffentlicht 14.04.2016 14:59:07
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via (1) the list_1680466951_oldfilterval parameter to systems/PhysicalList.do or (2) unspecified vectors involvin...

5.4

CVE-2015-0284

  • EPSS 0.27%
  • Veröffentlicht 14.04.2016 14:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in spacewalk-java in Spacewalk and Red Hat Satellite 5.7 allows remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the XMLRPC API, involving user details. NOTE: this vul...

6

CVE-2015-5233

  • EPSS 0.19%
  • Veröffentlicht 11.04.2016 21:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Foreman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which allows (1) remote authenticated users with the view_reports permission to read reports from arbitrary hosts or (2) remote authenticated users with the des...

2.1

CVE-2015-5006

  • EPSS 0.07%
  • Veröffentlicht 07.12.2015 20:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate attackers to obtain sensitive information by reading the K...

7.5

CVE-2015-8126

  • EPSS 7.52%
  • Veröffentlicht 13.11.2015 03:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a den...

5

CVE-2015-4902

Warnung
  • EPSS 7.68%
  • Veröffentlicht 22.10.2015 00:00:03
  • Zuletzt bearbeitet 22.10.2025 00:15:43

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.