Media
CVE-2014-1933
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.788
Restablecer filtros
Alta
CVE-2014-2828
OpenStack Identity (Keystone) DoS through V3 API authentication chaining
Alta
CVE-2014-2237
OpenStack Identity (Keystone) Trustee token revocations does not work with memcache backend
Alta
CVE-2014-2573
OpenStack Nova VMWare driver leaks rescued images
Media
CVE-2014-1839
Creation of Temporary File With Insecure Permissions in logilab-commons
Alta
CVE-2014-1838
Improper Link Resolution Before File Access in logilab-commons
Media
CVE-2014-1948
OpenStack Glance sensitive information disclosure via logs
Alta
CVE-2013-7130
OpenStack Nova Live migration can leak root disk into ephemeral storage
Baja
CVE-2014-1604
The parser cache functionality in parsergenerator.py in RPLY (aka python-rply) before 0.7.1 allows local users to spoof cache data by pre-creating a temporary rply-*.json file with a predictable name.
Alta
CVE-2013-4439
Minion identity not validated in saltstack
Sin evaluar
CVE-2013-4438
Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to b
Sin evaluar
CVE-2013-5943
Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Media
CVE-2013-4294
OpenStack Identity (Keystone) allows remote attackers to bypass intended access restrictions via revoked PKI token
Media
CVE-2013-2217
cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name i
Media
CVE-2013-4183
OpenStack Cinder LVMVolumeDriver does not zero deleted snapshots
Media
CVE-2013-1888
Improper Link Resolution Before File Access in pip
Media
CVE-2013-2132
Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo
Alta
CVE-2013-1629
Improper Input Validation in pip
Media
CVE-2013-2059
OpenStack Identity (Keystone) improper revoking of the authentication token when deleting a user
Alta
CVE-2013-0335
OpenStack Compute Nova Unauthorised access to arbitrary VM using VNC token from deleted VM
Alta
CVE-2013-1838
OpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp function
Media
CVE-2013-0212
OpenStack Glance logs user name and password in cleartext
Media
CVE-2012-5625
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which al
Media
CVE-2012-5571
OpenStack Keystone intended authorization restrictions bypass
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.