Skip to content
OpenAdvisories

Archive

18 September 2012

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium —

    Piwik (now Matomo) Vulnerable to Arbitrary Code Execution

    Unspecified vulnerability in Piwik 1.2 through 1.4 allows remote attackers with the view permission to execute arbitrary code via unknown attack vectors.

  • Medium —

    OpenStack Keystone does not invalidate existing tokens when granting or revoking roles

    OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles.

  • Medium 5.9

    Microsoft Windows Phone 7 does not verify the domain name in the subject's Common Name (CN) field of an X.509 certifica…