Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 826

Export CSV
CVE-2014-3520

openstack-keystone: Keystone V2 trusts privilege escalation through user supplied project id

OpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated trustees to gain access to an unauthorized project for which the trustor has certain roles via the project ID in a V2 API trust token request.

CVSS 2.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Openstack Redhat
Products
Keystone Openstack
CVE-2014-3517

openstack-nova: timing attack issue allows access to other instances' configuration information

api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests.

CVSS 2.0 · 4.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Openstack Redhat
Products
Nova Openstack
CVE-2014-3497

openstack-swift: XSS in Swift requests through WWW-Authenticate header

Cross-site scripting (XSS) vulnerability in OpenStack Swift 1.11.0 through 1.13.1 allows remote attackers to inject arbitrary web script or HTML via the WWW-Authenticate header.

CVSS 2.0 · 4.3 Medium EPSS 2.1% KEV · Not listed
Vendors
Openstack Redhat
Products
Swift Openstack
CVE-2016-9566

nagios: Privilege escalation issue

base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.

CVSS 3.0 · 7.8 High EPSS 4.9% KEV · Not listed
Vendors
Nagios Redhat
Products
Nagios Openstack Storage
CVE-2016-9565

nagios: Command injection via curl in MagpieRSS

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.

CVSS 3.0 · 9.8 Critical EPSS 22.7% KEV · Not listed
Vendors
Nagios Redhat
Products
Nagios Openstack Storage
CVE-2014-3476

openstack-keystone: privilege escalation through trust chained delegation

OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles.

CVSS 2.0 · 6.0 Medium EPSS 2.3% KEV · Not listed
Vendors
Openstack Redhat Suse
Products
Keystone Openstack Cloud
CVE-2016-9185

openstack-heat: Template source URL allows network port scan

In OpenStack Heat, by launching a new Heat stack with a local URL an authenticated user may conduct network discovery revealing internal network configuration. Affected versions are <=5.0.3, >=6.0.0 <=6.1.0, and ==7.0.0.

CVSS 3.0 · 4.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Openstack Redhat
Products
Heat Openstack
CVE-2016-8910

Qemu: net: rtl8139: infinite loop while transmit in C+ mode

The rtl8139_cplus_transmit function in hw/net/rtl8139.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) by leveraging failure to limit the ring descriptor count.

CVSS 3.1 · 6.0 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Opensuse Qemu and 1 more
Products
Debian Linux Leap Qemu and 3 more
CVE-2014-3475

openstack-horizon: multiple XSS flaws

Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-8578.

CVSS 2.0 · 3.5 Low EPSS 1.2% KEV · Not listed
Vendors
Openstack Opensuse Redhat
Products
Horizon Opensuse Openstack
CVE-2016-8909

Qemu: audio: intel-hda: infinite loop in processing dma buffer stream

The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via an entry with the same value for buffer length and pointer position.

CVSS 3.1 · 6.0 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Opensuse Qemu and 1 more
Products
Debian Linux Leap Qemu and 3 more
CVE-2016-8669

Qemu: char: divide by zero error in serial_update_parameters

The serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving a value of divider greater than baud base.

CVSS 3.1 · 6.0 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Opensuse Qemu and 1 more
Products
Debian Linux Leap Qemu and 3 more
CVE-2014-3474

openstack-horizon: multiple XSS flaws

Cross-site scripting (XSS) vulnerability in horizon/static/horizon/js/horizon.instances.js in the Launch Instance menu in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to inject arbitrary web script or HTML via a network name.

CVSS 2.0 · 3.5 Low EPSS 1.9% KEV · Not listed
Vendors
Openstack Opensuse Redhat
Products
Horizon Opensuse Openstack
CVE-2016-8576

Qemu: usb: xHCI: infinite loop vulnerability in xhci_ring_fetch

The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit the number of link Transfer Request Blocks (TRB) to process.

CVSS 3.1 · 6.0 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Opensuse Qemu and 1 more
Products
Debian Linux Leap Qemu and 3 more
CVE-2016-7466

Qemu: usb: xhci memory leakage during device unplug

Memory leak in the usb_xhci_exit function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator), when the xhci uses msix, allows local guest OS administrators to cause a denial of service (memory consumption and possibly QEMU process crash) by repeatedly unplugging a USB device.

CVSS 3.1 · 6.0 Medium EPSS < 1% KEV · Not listed
Vendors
Opensuse Qemu Redhat
Products
Leap Qemu Enterprise Linux and 2 more
CVE-2014-3473

openstack-horizon: multiple XSS flaws

Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestration template owners or catalogs to inject arbitrary web script or HTML via a crafted template.

CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Openstack Opensuse Redhat
Products
Horizon Opensuse Openstack
CVE-2016-7422

Qemu: virtio: null pointer dereference in virtqueu_map_desc

The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via a large I/O descriptor buffer length value.

CVSS 3.1 · 6.0 Medium EPSS < 1% KEV · Not listed
Vendors
Opensuse Qemu Redhat
Products
Leap Qemu Enterprise Linux and 2 more
CVE-2016-9921

Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy

Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while copying VGA data when cirrus graphics mode was set to be VGA. A privileged user inside guest could use this flaw to crash the Qemu process instance on the host, resulting in DoS.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Qemu Redhat
Products
Debian Linux Qemu Enterprise Linux and 2 more
CVE-2016-7401

python-django: CSRF protection bypass on a site with Google Analytics

The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.

CVSS 3.0 · 7.5 High EPSS 5.7% KEV · Not listed
Vendors
Canonical Debian Djangoproject and 1 more
Products
Ubuntu Linux Debian Linux Django and 1 more
CVE-2014-3461

Qemu: usb: fix up post load checks

hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, related to "USB post load checks."

CVSS 2.0 · 6.8 Medium EPSS 2.7% KEV · Not listed
Vendors
Qemu Redhat
Products
Qemu Enterprise Linux Openstack
CVE-2016-6888

Qemu: net: vmxnet: integer overflow in packet initialisation

Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Qemu Redhat
Products
Debian Linux Qemu Enterprise Linux and 2 more