Known vulnerabilities in rubygem-foreman_rh_cloud (Red Hat package)
Vendor:
Red Hat Inc.
Software CPE:
cpe:2.3:o:red_hat:rubygem-foreman_rh_cloud_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
65
Public exploits:
4
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
13.2.10-1.el9sat
13.2.9-1.el9sat
12.2.18-1.el9sat
12.2.17-1.el9sat
12.2.14-1.el9sat
12.2.12-1.el9sat
10.0.7-1.el8sat
10.0.7-1.el9sat
11.4.3-1.el9sat
9.0.61-1.el8sat
10.0.6-1.el8sat
10.0.6-1.el9sat
11.4.0-1.el9sat
9.0.60-1.el8sat
10.0.4-1.el8sat
10.0.4-1.el9sat
10.0.3-1.el8sat
10.0.3-1.el9sat
9.0.59-1.el8sat
10.0.2-1.el8sat
10.0.2-1.el9sat
9.0.58-1.el8sat
9.0.55-1.el8sat
8.0.51-1.el8sat
7.0.48-1.el8sat
5.0.44-1.el8sat
5.0.39-1.el8sat
6.0.44-1.el8sat
Vulnerabilities (65)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU111989 - Resource exhaustion CVE-2025-46727 |
CWE-400 | Medium | 9.0.61-1.el8sat | 27.06.2025 |
SB2025062709 SB2025062710 SB2025062711 and 24 more |
||
| #VU105796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-27610 |
CWE-22 | Medium | 9.0.60-1.el8sat, 10.0.4-1.el8sat, 10.0.4-1.el9sat, 11.4.0-1.el9sat | 17.03.2025 |
SB2025031756 SB20250317118 SB20250317119 and 15 more |
||
| #VU105689 - Improper Control of Generation of Code ('Code Injection') CVE-2025-27407 |
CWE-94 | High | 9.0.60-1.el8sat, 10.0.4-1.el8sat, 10.0.4-1.el9sat, 11.4.0-1.el9sat | 13.03.2025 |
SB2025031315 SB2025031316 SB2025040330 and 3 more |
||
| #VU103000 - Improper input validation CVE-2024-56374 |
CWE-20 | Medium | 11.4.0-1.el9sat | 20.01.2025 |
SB2025012005 SB2025012029 SB2025012030 and 11 more |
||
| #VU101972 - Security Features CVE-2024-56326 |
CWE-254 | Low | 11.4.0-1.el9sat | 27.12.2024 |
SB2024122789 SB2024122790 SB2024122791 and 78 more |
||
| #VU101971 - Security Features CVE-2024-56201 |
CWE-254 | Low | 9.0.60-1.el8sat | 27.12.2024 |
SB2024122789 SB2025010203 SB2025010322 and 62 more |
||
| #VU99568 - Missing release of memory after effective lifetime CVE-2024-8376 |
CWE-401 | Medium | 10.0.2-1.el8sat, 10.0.2-1.el9sat | 31.10.2024 |
SB20241031109 SB2024110111 SB2024110112 and 7 more |
||
| #VU97593 - Improper Authentication CVE-2024-7012 |
CWE-287 | High | 10.0.2-1.el8sat, 10.0.2-1.el9sat | 19.09.2024 |
SB2024092064 SB2024092065 SB2024092066 and 1 more |
||
| #VU95445 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-42005 |
CWE-89 | High | 10.0.2-1.el8sat, 10.0.2-1.el9sat | 07.08.2024 |
SB2024080728 SB2024080771 SB2024080772 and 12 more |
||
| #VU94188 - Improper input validation CVE-2024-39614 |
CWE-20 | Medium | 10.0.2-1.el8sat, 10.0.2-1.el9sat | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 15 more |
||
| #VU89429 - Improper input validation CVE-2024-31755 |
CWE-20 | Medium | 9.0.61-1.el8sat | 14.05.2024 |
SB2024051431 SB2024092634 SB2024092638 and 4 more |
||
| #VU89381 - Uncontrolled Recursion CVE-2024-4340 |
CWE-674 | Medium | 9.0.61-1.el8sat | 13.05.2024 |
SB2024051329 SB2024051330 SB2024051352 and 15 more |
||
| #VU87734 - Resource exhaustion CVE-2024-28863 |
CWE-400 | Medium | 10.0.2-1.el8sat, 10.0.2-1.el9sat | 22.03.2024 |
SB2024032234 SB2024052306 SB2024061114 and 30 more |
||
| #VU87010 - Incorrect Regular Expression CVE-2024-25126 |
CWE-185 | Medium | 9.0.59-1.el8sat | 04.03.2024 |
SB2024030429 SB2024030544 SB2024041627 and 21 more |
||
| #VU87009 - Improper input validation CVE-2024-26141 |
CWE-20 | Medium | 9.0.59-1.el8sat | 04.03.2024 |
SB2024030429 SB2024030544 SB2024031240 and 22 more |
||
| #VU87008 - Improper input validation CVE-2024-26146 |
CWE-20 | Medium | 9.0.59-1.el8sat | 04.03.2024 |
SB2024030428 SB2024030544 SB2024031240 and 21 more |
||
| #VU86810 - Exposure of sensitive information to an unauthorized actor CVE-2024-26144 |
CWE-200 | Medium | 9.0.59-1.el8sat | 27.02.2024 |
SB2024022643 SB2024032148 SB2024041240 and 4 more |
||
| #VU85695 - Cryptographic Issues CVE-2024-23342 |
CWE-310 | Medium | 9.0.59-1.el8sat | 23.01.2024 |
SB2024012329 SB2024041935 SB2024120937 |
||
| #VU84772 - NULL Pointer Dereference CVE-2023-50471 |
CWE-476 | Medium | 9.0.61-1.el8sat | 26.12.2023 |
SB2023122617 SB2024040701 SB2024040702 and 6 more |
||
| #VU84771 - NULL Pointer Dereference CVE-2023-50472 |
CWE-476 | Medium | 9.0.61-1.el8sat | 26.12.2023 |
SB2023122617 SB2024040705 SB2024102547 and 2 more |
Showing elements 1 - 20 out of 65