Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
network satellite vulnerabilities and exploits
(subscribe to this query)
6.8
CVSSv2
CVE-2009-4139
Cross-site request forgery (CSRF) vulnerability in the Spacewalk Java site packages (aka spacewalk-java) 1.2.39 in Spacewalk, as used in the server in Red Hat Network Satellite 5.3.0 up to and including 5.4.1 and other products, allows remote malicious users to hijack the authent...
Redhat Network Satellite Server 5.4.0
Redhat Network Satellite Server 5.3.0
Redhat Network Satellite Server 5.4.1
Redhat Spacewalk-java 1.2.39
6.4
CVSSv2
CVE-2009-0788
Red Hat Network (RHN) Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote malicious users to (1) obtain unspecified sensitive host information or (2) use the server as an inadvertent proxy to connect to arbitrary services and IP addresses ...
Redhat Network Satellite Server 5.3
Redhat Network Satellite Server 5.4
4.3
CVSSv2
CVE-2007-5961
Cross-site scripting (XSS) vulnerability in the Red Hat Network channel search feature, as used in RHN and Red Hat Network Satellite prior to 5.0.2, allows remote malicious users to inject arbitrary web script or HTML via unknown vectors.
Redhat Network Satellite
6
CVSSv2
CVE-2010-2236
The monitoring probe display in spacewalk-java prior to 2.1.148-1 and Red Hat Network (RHN) Satellite 4.0.0 up to and including 4.2.0 and 5.1.0 up to and including 5.3.0, and Proxy 5.3.0, allows remote authenticated users with permissions to administer monitoring probes to execut...
Redhat Satellite 4.0
Redhat Satellite 4.2
Redhat Satellite 5.3
Redhat Spacewalk-java
Redhat Network Proxy 5.3
Redhat Satellite 5.1
Redhat Satellite 5.2
Redhat Satellite 4.1
5.8
CVSSv2
CVE-2011-0717
Session fixation vulnerability in Red Hat Network (RHN) Satellite Server 5.4 allows remote malicious users to hijack web sessions via unspecified vectors related to Spacewalk.
Redhat Network Satellite Server 5.4
5.8
CVSSv2
CVE-2011-0718
Red Hat Network (RHN) Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote malicious users to conduct brute force password guessing attacks.
Redhat Network Satellite Server 5.4
6.5
CVSSv2
CVE-2013-2143
The users controller in Katello 1.5.0-14 and previous versions, and Red Hat Satellite, does not check authorization for the update_roles action, which allows remote authenticated users to gain privileges by setting a user account to an administrator account.
Redhat Network Satellite -
Theforeman Katello
1 EDB exploit
4.3
CVSSv2
CVE-2011-3344
Cross-site scripting (XSS) vulnerability in the Lookup Login/Password form in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote malicious users to inject arbitrary web script or HTML via the URI.
Redhat Spacewalk 1.6
Redhat Network Satellite -
5.8
CVSSv2
CVE-2011-1594
Open redirect vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url_bounce parameter.
Redhat Spacewalk 1.6
Redhat Network Satellite -
4.3
CVSSv2
CVE-2011-2919
Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote malicious users to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page.
Redhat Spacewalk 1.6
Redhat Network Satellite -
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
client side
CVE-2023-31889
template injection
CVE-2024-4304
CVE-2006-4304
CVE-2024-33272
type confusion
CVE-2024-21345
CVE-2024-33271
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
NEXT »