High
CVE-2014-2828
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,787
Reset filters
High
CVE-2014-2237
OpenStack Identity (Keystone) Trustee token revocations does not work with memcache backend
High
CVE-2014-2573
OpenStack Nova VMWare driver leaks rescued images
Medium
CVE-2014-1839
Creation of Temporary File With Insecure Permissions in logilab-commons
High
CVE-2014-1838
Improper Link Resolution Before File Access in logilab-commons
Medium
CVE-2014-1948
OpenStack Glance sensitive information disclosure via logs
High
CVE-2013-7130
OpenStack Nova Live migration can leak root disk into ephemeral storage
Low
CVE-2014-1604
The parser cache functionality in parsergenerator.py in RPLY (aka python-rply) before 0.7.1 allows local users to spoof cache data by pre-creating a temporary rply-*.json file with a predictable name.
High
CVE-2013-4439
Minion identity not validated in saltstack
Unrated
CVE-2013-4438
Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to b
Unrated
CVE-2013-5943
Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Medium
CVE-2013-4294
OpenStack Identity (Keystone) allows remote attackers to bypass intended access restrictions via revoked PKI token
Medium
CVE-2013-2217
cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name i
Medium
CVE-2013-4183
OpenStack Cinder LVMVolumeDriver does not zero deleted snapshots
Medium
CVE-2013-1888
Improper Link Resolution Before File Access in pip
Medium
CVE-2013-2132
Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo
High
CVE-2013-1629
Improper Input Validation in pip
Medium
CVE-2013-2059
OpenStack Identity (Keystone) improper revoking of the authentication token when deleting a user
High
CVE-2013-0335
OpenStack Compute Nova Unauthorised access to arbitrary VM using VNC token from deleted VM
High
CVE-2013-1838
OpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp function
Medium
CVE-2013-0212
OpenStack Glance logs user name and password in cleartext
Medium
CVE-2012-5625
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which al
Medium
CVE-2012-5571
OpenStack Keystone intended authorization restrictions bypass
High
CVE-2012-3542
OpenStack Keystone Allows Remote User Account Creation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.