Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 14

Export CSV
CVE-2023-3637

Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277)

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.

CVSS 3.1 · 4.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Redhat
Products
Openstack Openstack-optools Openstack Platform
CVE-2017-7401

collectd: Infinite loop due to incorrect interaction of parse_packet() and parse_part_sign_sha256() functions

Incorrect interaction of the parse_packet() and parse_part_sign_sha256() functions in network.c in collectd 5.7.1 and earlier allows remote attackers to cause a denial of service (infinite loop) of a collectd instance (configured with "SecurityLevel None" and with empty "AuthFile" options) via a crafted UDP packet.

CVSS 3.0 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Collectd Redhat
Products
Collectd Enterprise Linux Openstack-optools and 2 more
CVE-2017-10906

fluentd: Escape sequence injection in filter_parser.rb:filter_stream can lead to arbitrary command execution when processing logs

Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors.

CVSS 3.0 · 9.8 Critical EPSS 4.6% KEV · Not listed
Vendors
Fluentd Redhat
Products
Fluentd Openstack Openstack-optools
CVE-2017-16820

collectd: double free in csnmp_read_table function in snmp.c

The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash (or potentially have other impact).

CVSS 3.0 · 9.8 Critical EPSS 3.6% KEV · Not listed
Vendors
Collectd Redhat
Products
Collectd Enterprise Linux Openstack-optools and 2 more
CVE-2016-6186

django: XSS in admin's add/change related popup

Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject arbitrary web script or HTML via vectors involving unsafe usage of Element.innerHTML.

CVSS 3.0 · 6.1 Medium EPSS 5.5% KEV · Not listed
Vendors
Debian Djangoproject Redhat
Products
Debian Linux Django Openstack and 1 more
CVE-2015-8213

python-django: Information leak through date template filter

The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRET_KEY.

CVSS 2.0 · 5.0 Medium EPSS 4.3% KEV · Not listed
Vendors
Djangoproject Redhat
Products
Django Openstack Openstack-optools
CVE-2015-8080

redis: Integer wraparound in lua_struct.c causing stack-based buffer overflow

Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow.

CVSS 3.1 · 7.5 High EPSS 4.6% KEV · Not listed
Vendors
Debian Opensuse Redhat and 1 more
Products
Debian Linux Leap Opensuse and 3 more
CVE-2016-2512

python-django: Malicious redirect and possible XSS attack via user-supplied redirect URLs containing basic auth

The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cross-site scripting (XSS) attacks via a URL containing basic authentication, as demonstrated by http://mysite.example.com\@attacker.com.

CVSS 3.0 · 7.4 High EPSS 4.1% KEV · Not listed
Vendors
Djangoproject Redhat
Products
Django Openstack Openstack-optools
CVE-2016-2513

python-django: User enumeration through timing difference on password hasher work factor upgrade

The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests.

CVSS 3.0 · 3.1 Low EPSS 3.4% KEV · Not listed
Vendors
Djangoproject Redhat
Products
Django Openstack Openstack-optools
CVE-2023-3223

Undertow: outofmemoryerror due to @multipartconfig handling

A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit the file size, it's possible to bypass the limit by setting the file name in the request to null.

CVSS 3.1 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Integration Jboss Data Grid and 18 more
CVE-2019-10192

redis: Heap buffer overflow in HyperLogLog triggered by malicious client

A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write up to 3 bytes beyond the end of a heap-allocated buffer.

CVSS 3.1 · 7.2 High EPSS 25.6% KEV · Not listed
Vendors
Canonical Debian Oracle and 2 more
Products
Ubuntu Linux Debian Linux Communications Operations Monitor and 9 more
CVE-2019-0223

qpid-proton: TLS Man in the Middle Vulnerability

While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS *even when configured to verify the peer certificate* while used with OpenSSL versions before 1.1.0. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic.

CVSS 3.1 · 7.4 High EPSS 6.2% KEV · Not listed
Vendors
Apache Redhat
Products
Qpid A Mq Clients Cloudforms Managementengine and 14 more
CVE-2018-1000060

sensu: Password exposure in warn level log when configured for multiple rabbitMQ connections

Sensu, Inc. Sensu Core version Before 1.2.0 & before commit 46ff10023e8cbf1b6978838f47c51b20b98fe30b contains a CWE-522 vulnerability in Sensu::Utilities.redact_sensitive() that can result in sensitive configuration data (e.g. passwords) may be logged in clear-text. This attack appear to be exploitable via victims with configuration matching a specific pattern will observe sensitive data outputted in their service log files. This vulnerability appears to have been fixed in 1.2.1 and later, after commit 46ff10023e8cbf1b6978838f47c51b20b98fe30b.

CVSS 3.0 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Redhat Sensu
Products
Openstack-optools Sensu Core