Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 51
Filter zurücksetzenGlances Vulnerable to Command Injection via Dynamic Configuration Values
Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard
Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers
Glances's REST/WebUI Lacks Host Validation and Remains Exposed to DNS Rebinding
Glances has a SQL Injection in DuckDB Export via Unparameterized DDL Statements
Glances's Default CORS Configuration Allows Cross-Origin Credential Theft
Glances has Incomplete Secrets Redaction: /api/v4/args Endpoint Leaks Password Hash and SNMP Credentials
Glances has a Command Injection via Process Names in Action Command Templates
Glances exposes the REST API without authentication
Glances's Browser API Exposes Reusable Downstream Credentials via `/api/4/serverslist`
Glances Exposes Unauthenticated Configuration Secrets
Glances has SQL Injection via Process Names in TimescaleDB Export
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
Home Assistant vulnerable to account takeover via auth_callback login
A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.
OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption)
OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption)
The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision.
The v1 API in OpenStack Glance Essex (2012.1), Folsom (2012.2), and Grizzly, when using the single-tenant Swift or S3 store, reports the location field, which allows remote authenticated users to obta
OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption
The Python client library for Glance (python-glanceclient) before 0.10.0 does not properly check the preverify_ok value, which prevents the server hostname from being verified with a domain name in th
XML External Entity Reference in Glances
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.