Search for packages
| purl | pkg:rpm/redhat/supervisor@3.1.4-1?arch=el7 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-5dmr-8tvd-8uen
Aliases: CVE-2018-11627 GHSA-mq35-wqvf-r23c |
Cross-site Scripting Sinatra has XSS via the Bad Request page that occurs upon a params parser exception. | There are no reported fixed by versions. |
|
VCID-65ha-wgr4-eqd4
Aliases: CVE-2013-4492 GHSA-r5hc-9xx5-97rw |
Reflective XSS Vulnerability When a translation is missing, the HTML exception message raised does not escape the keys. Under certain common configurations this string can contain user input which would allow an attacker to execute a reflective XSS attack. | There are no reported fixed by versions. |
|
VCID-a11q-3bvq-a3e3
Aliases: CVE-2017-12148 |
Tower: modification of git hooks in SCM repo via upstream playbook execution | There are no reported fixed by versions. |
|
VCID-e25e-yb1v-qqcw
Aliases: CVE-2017-11610 GHSA-x7c8-4x3h-874w PYSEC-2017-41 |
The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups. | There are no reported fixed by versions. |
|
VCID-rqh3-c53s-vuee
Aliases: CVE-2017-15125 |
cloudforms: XSS in self-service UI snapshot feature | There are no reported fixed by versions. |
|
VCID-sqa5-8yrd-qyfz
Aliases: CVE-2018-8048 GHSA-x7rv-cr6v-4vm4 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In the Loofah gem for Ruby, denylisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment. | There are no reported fixed by versions. |
|
VCID-xby9-avva-a3e5
Aliases: CVE-2018-3741 GHSA-px3r-jm9g-c8w8 |
XSS vulnerability The gem allows attributes that are not specified in the allowlist to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. | There are no reported fixed by versions. |
|
VCID-zrsc-vqxk-vkgx
Aliases: CVE-2012-6685 GHSA-6wj9-77wq-jq7p OSV-90946 |
Nokogiri is vulnerable to XML External Entity (XXE) attack Nokogiri before 1.5.4 is vulnerable to XXE attacks. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||