HIGHRubyGems
GHSA-574q-fxfj-wv6h· CVE-2013-1655Puppet Improper Input Validation vulnerability
Modified: 11/29/2024
package
RubyGems/puppet
pkg:rubygems/puppet
MEDIUMRubyGems
GHSA-6xxq-j39w-g3f6· CVE-2012-1988Puppet Arbitrary Command Execution
Modified: 12/3/2024
MEDIUMRubyGems
GHSA-77hg-g8cc-5r37· CVE-2012-1053Puppet Privilege Escallation
Modified: 11/28/2024
MEDIUMRubyGems
GHSA-8c56-v25w-f89c· CVE-2011-3869Puppet arbitrary file overwrite
Modified: 12/2/2024
LOWRubyGems
GHSA-8jxj-9r5f-w3m2· CVE-2012-3866Puppet allows local users to obtain sensitive configuration information
Modified: 11/29/2024
MEDIUMRubyGems
GHSA-92v7-pq4h-58j5· CVE-2014-3248facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerability
Modified: 12/2/2024
MEDIUM6.5RubyGems
GHSA-93j5-g845-9wqp· CVE-2021-27023Unsafe HTTP Redirect in Puppet Agent and Puppet Server
Modified: 11/29/2024
MEDIUMRubyGems
GHSA-9pvx-fwwh-w289· CVE-2011-0528Puppet does not properly restrict access to node resources
Modified: 12/2/2024
MEDIUMRubyGems
GHSA-c4mc-49hq-q275· CVE-2012-1906Puppet uses predictable filenames, allowing arbitrary file overwrite
Modified: 11/28/2024
LOWRubyGems
GHSA-c5qq-g673-5p49· CVE-2012-1989Puppet allows local users to overwrite arbitrary files via a symlink attack
Modified: 11/29/2024
MEDIUMRubyGems
GHSA-cj43-9h3w-v976· CVE-2013-4761Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service
Modified: 11/29/2024
HIGHRubyGems
GHSA-f7p5-w2cr-7cp7· CVE-2013-3567Puppet Improper Input Validation vulnerability
Modified: 11/29/2024
LOWRubyGems
GHSA-g89m-3wjw-h857· CVE-2012-3865Puppet vulnerable to Path Traversal
Modified: 11/29/2024
MEDIUM6.5RubyGems
GHSA-gqvf-892r-vjm5· CVE-2020-7942Improper Certificate Validation in Puppet
Modified: 2/22/2024
MEDIUMRubyGems
GHSA-mpmx-gm5v-q789· CVE-2011-3871Puppet uses predictable filenames, allowing arbitrary file overwrite
Modified: 12/2/2024
CRITICAL9.8RubyGems
GHSA-pqj5-7r86-64fv· CVE-2016-2785Puppet Improper Access Control
Modified: 2/16/2024
MEDIUMRubyGems
GHSA-q44r-f2hm-v76v· CVE-2012-3867Pupper does not properly restrict characters in Common Name field of Certificate Signing Request
Modified: 11/29/2024
MEDIUM6.5RubyGems
GHSA-q4g7-jrxv-67r9· CVE-2021-27025Silent Configuration Failure in Puppet Agent
Modified: 11/29/2024
MEDIUMRubyGems
GHSA-qh3g-27jf-3j54· CVE-2011-3870Puppet allows local users to modify the permissions of arbitrary files
Modified: 12/2/2024
LOWRubyGems
GHSA-v58w-6xc2-w799· CVE-2012-1987Puppet Denial of Service and Arbitrary File Write
Modified: 12/7/2024
LOWRubyGems
GHSA-vrh7-99jh-3fmm· CVE-2010-0156Puppet arbitrary files overwrite via a symlink attack
Modified: 12/3/2024
MEDIUM5.5RubyGems
GHSA-vw22-465p-8j5w· CVE-2017-10689Tarball permission preservation in puppet
Modified: 2/20/2024
LOWRubyGems
GHSA-vxf6-w9mp-95hm· CVE-2012-3408Puppet supports use of IP addresses in certnames without warning of potential risks
Modified: 11/29/2024