Tagged “osv”
CVEs tagged osv, newest first.
7207 CVEsRSS
CVE-2015-5286MediumOpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service
OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service
CVE-2016-4808Medium· 4.5PoCWeb2py Cross-Site Request Forgery vulnerability
Web2py Cross-Site Request Forgery vulnerability
CVE-2014-7960MediumOpenStack Swift metadata constraints are not correctly enforced
OpenStack Swift metadata constraints are not correctly enforced
CVE-2012-2395HighCobbler subject to Command Injection
Cobbler subject to Command Injection
CVE-2016-0738High· 7.5OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service
OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service
CVE-2013-4477LowOpenStack Identity Keystone Privilege Escalation vulnerability
OpenStack Identity Keystone Privilege Escalation vulnerability
CVE-2011-1340MediumPlone XSS Vulnerability
Plone XSS Vulnerability
CVE-2016-5363High· 8.2OpenStack Neutron Intended MAC-spoofing protection mechanism bypass
OpenStack Neutron Intended MAC-spoofing protection mechanism bypass
CVE-2015-1851MediumOpenStack Cinder file disclosure in image convert
OpenStack Cinder file disclosure in image convert
CVE-2015-3156Medium· 5.5Openstack DBaaS (Trove) Improper Link Resolution Before File Access
Openstack DBaaS (Trove) Improper Link Resolution Before File Access
CVE-2016-0737High· 7.5OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service
OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service
CVE-2011-3587HighPoCZope Command Execution Vulnerability
Zope Command Execution Vulnerability
CVE-2014-0056MediumOpenStack Neutron Improper Authentication vulnerability
OpenStack Neutron Improper Authentication vulnerability
CVE-2013-2209Medium· 6.1Review Board Cross-site scripting (XSS) vulnerability in the reviews dropdown
Review Board Cross-site scripting (XSS) vulnerability in the reviews dropdown
CVE-2014-3497MediumOpenStack Swift Cross-site Scriping vulnerability
OpenStack Swift Cross-site Scriping vulnerability
CVE-2016-0757Medium· 4.3OpenStack Image Service (Glance) vulnerable to Improper Access Control
OpenStack Image Service (Glance) vulnerable to Improper Access Control
CVE-2010-4338Mediumocrodjvu is vulnerable to Arbitrary File Modification via symlink attack
ocrodjvu is vulnerable to Arbitrary File Modification via symlink attack
CVE-2013-4463LowOpenStack Nova denial of service through compressed disk images
OpenStack Nova denial of service through compressed disk images
CVE-2014-3242MediumSOAPpy vulnerable to XML External Entity attacks
SOAPpy vulnerable to XML External Entity attacks
CVE-2014-5356MediumOpenStack Glance improper validation of the image_size_cap configuration option
OpenStack Glance improper validation of the image_size_cap configuration option
CVE-2013-4278LowOpenStack Compute (Nova) Resource limit circumvention in Nova private flavors
OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors
CVE-2013-4469LowOpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image
OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image
CVE-2014-3243MediumSOAPpy vulnerable to XXE attacks
SOAPpy vulnerable to XXE attacks
CVE-2013-4497MediumOpenStack Compute Nova Improper Access Control
OpenStack Compute Nova Improper Access Control
CVE-2013-6419MediumOpenStack Nova Router metadata queries are not restricted by tenant
OpenStack Nova Router metadata queries are not restricted by tenant
CVE-2016-8638Critical· 9.1Session Fixation in ipsilon
Session Fixation in ipsilon
CVE-2017-1000469Critical· 9.8Cobbler vulnerable to arbitrary code execution
Cobbler vulnerable to arbitrary code execution
CVE-2018-19653Medium· 5.9HashiCorp Consul can use cleartext agent-to-agent RPC communication
HashiCorp Consul can use cleartext agent-to-agent RPC communication
CVE-2016-10075High· 7.8TDQM Arbitrary Code Execution
TDQM Arbitrary Code Execution
CVE-2014-6633High· 8.8Tryton vulnerable to arbitrary command execution
Tryton vulnerable to arbitrary command execution