SA
Product
Satellite
On CISA KEVExploited in the wild
241
CVEs
4
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 31High 64Medium 107Low 23
Watch
Add Satellite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3427 In wildKEV | 9.8 | Apr 21 | Oracle Java SE and JRockit Unspecified Vulnerability Affected: 5.6; 5.7 |
| CVE-2015-2590 In wildKEV | 9.8 | Jul 16 | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability Affected: 5.6; 5.7 |
| CVE-2024-7923 | 9.8 | Sep 4 | Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore Affected: 6.13; 6.14; 6.15 |
| CVE-2024-7012 | 9.8 | Sep 4 | Puppet-foreman: an authentication bypass vulnerability exists in foreman Affected: 6.13; 6.14; 6.15 |
| CVE-2019-10137 | 9.8 | Jul 2 | A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens Affected: 5.0 |
| CVE-2018-12549 | 9.8 | Feb 11 | In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it Affected: 5.8 |
| CVE-2018-12547 | 9.8 | Feb 11 | In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length parameter Affected: 5.8 |
| CVE-2018-10931 | 9.8 | Aug 9 | It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC Affected: 5.6; 5.7; 5.8 |
| CVE-2017-7470 | 9.8 | Jul 27 | It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in… Affected: 5.6; 5.7 |
| CVE-2017-15095 | 9.8 | Feb 6 | A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending… Affected: 6.4 |
| CVE-2016-9843 | 9.8 | May 23 | The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation Affected: 5.8 |
| CVE-2016-9841 | 9.8 | May 23 | inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic Affected: 5.8 |
| CVE-2017-5929 | 9.8 | Mar 13 | QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components Affected: 6.4 |
| CVE-2017-10346 | 9.6 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: 5.8 |
| CVE-2017-10285 | 9.6 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: 5.8 |
| CVE-2017-10110 | 9.6 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT) Affected: 5.8 |
| CVE-2017-10107 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: 5.8 |
| CVE-2017-10101 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: 5.8 |
| CVE-2017-10096 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: 5.8 |
| CVE-2017-10090 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 5.8 |
| CVE-2017-10089 | 9.6 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO) Affected: 5.8 |
| CVE-2017-10087 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 5.8 |
| CVE-2026-96659 | 9.1 | Oct 1 | Foreman: excessive permissions for viewer role on preview Affected: 6.16 before 6.16.4; 6.17 before 6.17.12; 6.19 before 6.19.5; 6.18 before 6.18.10 |
| CVE-2022-3874 | 9.1 | Sep 22 | A command injection flaw was found in foreman Affected: 6.0 |
| CVE-2023-0462 | 9.1 | Sep 20 | An arbitrary code execution flaw was found in Foreman Affected: 6.0 and later |
| CVE-2023-0118 | 9.1 | Sep 20 | An arbitrary code execution flaw was found in Foreman Affected: 6.13 before 6.13.3 |
| CVE-2019-17631 | 9.1 | Oct 17 | From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks Affected: 5.8 |
| CVE-2015-5041 | 9.1 | Jun 6 | The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive… Affected: 5.6; 5.7 |
| CVE-2008-2369 | 9.1 | Aug 14 | manzier.pxt in Red Hat Network Satellite Server before 5.1.1 has a hard-coded authentication key, which allows remote attackers to connect to the server and obtain sensitive… Affected: before 5.1.1 |
| CVE-2018-3183 | 9.0 | Oct 17 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting) Affected: 5.8 |
| CVE-2017-10102 | 9.0 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: 5.8 |
Showing 31