Skip to content
Noroxi

satellite records

27 published records for vendor satellite.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 3.7%
Pre-auth RCE
4
With a fix record
85.2%
Median publish → KEV
No record has entered KEV

Records by year

  1. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

27 records
  • CVE-2025-24293
    60This week

    # Active Storage allowed transformation methods potentially unsafe Active Storage attempts to prevent the use of potentially unsafe image

    CriticalCVSS 9.2WeaponizedEPSS 5%

    rails · activestorageJan 30, 2026

  • CVE-2026-31072
    39Monitor

    The JSONSerializer and CBORSerializer in APScheduler (all versions including 3.10.x and 4.0.0a5) are vulnerable to Remote Code Execution (RC

    CriticalCVSS 9.8No exploitEPSS 0%

    May 19, 2026

  • CVE-2025-69872
    39Monitor

    DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default.

    CriticalCVSS 9.8No exploitEPSS 0%

    Feb 11, 2026

  • CVE-2026-44990
    37Monitor

    Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`

    CriticalCVSS 9.3No exploitEPSS 0%

    apostrophecms · sanitize-htmlJun 12, 2026

  • CVE-2025-14813
    37Monitor

    GOSTCTR implementation unable to process more than 255 blocks correctly

    CriticalCVSS 9.3No exploitEPSS 0%

    legion of the bouncy castle inc. · bc-javaApr 15, 2026

  • CVE-2026-9277
    36Monitor

    shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`

    CriticalCVSS 9.2Proof of conceptEPSS 0%

    May 22, 2026

  • CVE-2026-5598
    35Monitor

    Non-constant time comparisons risk private key leakage in FrodoKEM.

    HighCVSS 8.9No exploitEPSS 0%

    legion of the bouncy castle inc. · bc-javaApr 15, 2026

  • CVE-2026-27830
    35Monitor

    c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property

    HighCVSS 8.9No exploitEPSS 0%

    swaldman · c3p0Feb 25, 2026

  • CVE-2026-3505
    34Monitor

    Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.

    HighCVSS 8.7No exploitEPSS 0%

    legion of the bouncy castle inc. · bc-javaApr 15, 2026

  • CVE-2026-12143
    34Monitor

    form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)

    HighCVSS 8.7No exploitEPSS 0%

    form-data · form-dataJun 12, 2026

  • CVE-2026-33079
    34Monitor

    Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titles

    HighCVSS 8.7No exploitEPSS 0%

    lepture · mistuneMay 6, 2026

  • CVE-2026-49851
    34Monitor

    Mistune: Potential DoS via quadratic-time parsing in parse_link_text

    HighCVSS 8.7No exploitEPSS 0%

    lepture · mistuneJun 24, 2026

  • CVE-2026-0603
    33Monitor

    Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection

    HighCVSS 8.3Proof of conceptEPSS 1%

    red hat · red hat jboss enterprise application platform 7.1 eus for rhel 7Jan 23, 2026

  • CVE-2026-1531
    32Monitor

    Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification

    HighCVSS 8.1No exploitEPSS 0%

    red hat · red hat satellite 6.16 for rhel 8Feb 2, 2026

  • CVE-2026-1530
    32Monitor

    Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation

    HighCVSS 8.1No exploitEPSS 0%

    red hat · red hat satellite 6.16 for rhel 8Feb 2, 2026

  • CVE-2026-28356
    30Monitor

    ReDoS in multipart 1.3.0 - `parse_options_header()`

    HighCVSS 7.5No exploitEPSS 0%

    defnull · multipartMar 12, 2026

  • CVE-2026-48863
    30Monitor

    Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service

    HighCVSS 7.5No exploitEPSS 0%

    opensuse · libsolvJul 16, 2026

  • CVE-2026-42561
    30Monitor

    Python-Multipart: Denial of Service via unbounded multipart part headers

    HighCVSS 7.5No exploitEPSS 0%

    kludex · python-multipartMay 13, 2026

  • CVE-2026-40983
    30Monitor

    Micrometer gRPC server instrumentation DoS vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    spring · micrometerJun 9, 2026

  • CVE-2026-0775
    28Monitor

    npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability

    HighCVSS 7.0No exploitEPSS 0%

    npm · cliJan 23, 2026

  • CVE-2026-27145
    26Monitor

    Inefficient candidate hostname parsing in crypto/x509

    MediumCVSS 6.5Proof of conceptEPSS 0%

    go standard library · crypto/x509Jun 2, 2026

  • CVE-2026-5588
    25Monitor

    PKIX draft CompositeVerifier accepts empty signature sequence as valid.

    MediumCVSS 6.3No exploitEPSS 0%

    legion of the bouncy castle inc. · bc-javaApr 15, 2026

  • CVE-2026-0636
    22Monitor

    LDAP Injection Vulnerability in LDAPStoreHelper.java

    MediumCVSS 5.5No exploitEPSS 0%

    legion of the bouncy castle inc. · bc-javaApr 15, 2026

  • CVE-2026-45292
    21Monitor

    opentelemetry-java: Unbounded Memory Allocation in W3C Baggage Propagation

    MediumCVSS 5.3No exploitEPSS 1%

    open-telemetry · opentelemetry-javaMay 28, 2026

  • CVE-2021-47839
    20Monitor

    Marky 0.0.1 - Persistent Cross-Site Scripting

    MediumCVSS 5.1No exploitEPSS 0%

    vesparny · markyJan 16, 2026