Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 826

Export CSV
CVE-2013-4179

OpenStack: Nova XML entities DoS

The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664.

CVSS 2.0 · 4.3 Medium EPSS 2.7% KEV · Not listed
Vendors
Openstack Redhat
Products
Compute Havana Openstack
CVE-2013-4180

Foreman: hosts_controller.rb power/ipmi_boot Symbol creation DoS

The (1) power and (2) ipmi_boot actions in the HostController in Foreman before 1.2.2 allow remote attackers to cause a denial of service (memory consumption) via unspecified input that is converted to a symbol.

CVSS 2.0 · 5.0 Medium EPSS 2.4% KEV · Not listed
Vendors
Redhat Theforeman
Products
Openstack Satellite Foreman
CVE-2013-4182

foreman: app/controllers/api/v1/hosts_controller.rb API privilege escalation

app/controllers/api/v1/hosts_controller.rb in Foreman before 1.2.2 does not properly restrict access to hosts, which allows remote attackers to access arbitrary hosts via an API request.

CVSS 2.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Redhat Theforeman
Products
Openstack Satellite Foreman
CVE-2013-4183

OpenStack: Cinder LVM volume driver does not support secure deletion

The clear_volume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive information via unspecified vectors.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Openstack Redhat
Products
Cinder Openstack
CVE-2013-4185

OpenStack: Nova network source security groups denial of service

Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service (nova-network consumption) via a large number of server-creation operations, which triggers a large number of update requests.

CVSS 2.0 · 4.0 Medium EPSS 2.1% KEV · Not listed
Vendors
Openstack Redhat
Products
Compute Openstack
CVE-2013-4202

OpenStack: Cinder Denial of Service using XML entities

The (1) backup (api/contrib/backups.py) and (2) volume transfer (contrib/volume_transfer.py) APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664.

CVSS 2.0 · 4.3 Medium EPSS 2.6% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Cinder Openstack
CVE-2013-4214

core: html/rss-newsfeed.php insecure temporary file usage

rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache.

CVSS 2.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Nagios Redhat
Products
Nagios Openstack
CVE-2013-4222

OpenStack: Keystone disabling a tenant does not disable a user token

OpenStack Identity (Keystone) Folsom, Grizzly 2013.1.3 and earlier, and Havana before havana-3 does not properly revoke user tokens when a tenant is disabled, which allows remote authenticated users to retain access via the token.

CVSS 2.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Canonical Fedoraproject Openstack and 1 more
Products
Ubuntu Linux Fedora Keystone and 1 more
CVE-2013-4261

OpenStack: openstack-nova-compute console-log DoS

OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.

CVSS 2.0 · 3.5 Low EPSS 1.7% KEV · Not listed
Vendors
Openstack Redhat
Products
Folsom Grizzly Openstack
CVE-2013-4287

rubygems: version regex algorithmic complexity vulnerability

Algorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN in lib/rubygems/version.rb in RubyGems before 1.8.23.1, 1.8.24 through 1.8.25, 2.0.x before 2.0.8, and 2.1.x before 2.1.0, as used in Ruby 1.9.0 through 2.0.0p247, allows remote attackers to cause a denial of service (CPU consumption) via a crafted gem version that triggers a large amount of backtracking in a regular expression.

CVSS 2.0 · 4.3 Medium EPSS 3.3% KEV · Not listed
Vendors
Redhat Ruby-lang Rubygems
Products
Enterprise Linux Enterprise Mrg Openshift and 4 more
CVE-2013-4294

OpenStack: Keystone Token revocation failure using Keystone memcache/KVS backends

The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly compare the PKI token revocation list with PKI tokens, which allow remote attackers to bypass intended access restrictions via a revoked PKI token.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Openstack Redhat
Products
Keystone Openstack
CVE-2013-4299

kernel: dm: dm-snapshot data leak

Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a snapshot block device.

CVSS 2.0 · 6.0 Medium EPSS 3.8% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Mrg and 2 more
CVE-2013-4315

python-django: directory traversal with "ssi" template tag

Directory traversal vulnerability in Django 1.4.x before 1.4.7, 1.5.x before 1.5.3, and 1.6.x before 1.6 beta 3 allows remote attackers to read arbitrary files via a file path in the ALLOWED_INCLUDE_ROOTS setting followed by a .. (dot dot) in a ssi template tag.

CVSS 2.0 · 5.0 Medium EPSS 3.3% KEV · Not listed
Vendors
Djangoproject Redhat
Products
Django Openstack
CVE-2013-4386

Foreman: host and host group parameter SQL injection

Multiple SQL injection vulnerabilities in app/models/concerns/host_common.rb in Foreman before 1.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) fqdn or (2) hostgroup parameter.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Redhat Theforeman
Products
Openstack Satellite Foreman
CVE-2013-4428

Glance: image_download policy not enforced for cached images

OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download_image policy is configured, does not properly restrict access to cached images, which allows remote authenticated users to read otherwise restricted images via an image UUID.

CVSS 2.0 · 3.5 Low EPSS 3.1% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Glance Openstack
CVE-2013-4463

Nova: Compressed disk image DoS

OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) via a compressed QCOW2 image. NOTE: this issue is due to an incomplete fix for CVE-2013-2096.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Openstack Redhat
Products
Folsom Grizzly Havana and 1 more
CVE-2013-4477

openstack-keystone: unintentional role granting with Keystone LDAP backend

The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openstack Redhat
Products
Grizzly Havana Openstack
CVE-2013-4491

rubygem-actionpack: i18n missing translation XSS

Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/translation_helper.rb in the internationalization component in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted string that triggers generation of a fallback string by the i18n gem.

CVSS 2.0 · 4.3 Medium EPSS 2.2% KEV · Not listed
Vendors
Redhat Rhel Sam Rubyonrails
Products
Openstack Rhel Software Collections 1.4 and 2 more
CVE-2013-4497

openstack-nova: XenAPI security groups not kept through migrate or resize

The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live migration, which allows remote attackers to bypass intended restrictions.

CVSS 2.0 · 6.4 Medium EPSS 1.8% KEV · Not listed
Vendors
Openstack Redhat
Products
Folsom Grizzly Havana and 1 more
CVE-2013-4761

Puppet: resource_type service code execution

Unspecified vulnerability in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.0.1, allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service. NOTE: this vulnerability can only be exploited utilizing unspecified "local file system access" to the Puppet Master.

CVSS 2.0 · 5.1 Medium EPSS 1.6% KEV · Not listed
Vendors
Puppet Puppetlabs Redhat
Products
Puppet Puppet Enterprise Puppet and 1 more