Skip to content
OpenAdvisories

Archive

12 April 2013

Vulnerabilities first published on this day (UTC), newest first.

← March 2013 2013 / April /12 May 2013 →
  1. 14
  2. 26
  3. 319
  4. 414
  5. 58
  6. 6 
  7. 72
  8. 87
  9. 931
  10. 1015
  11. 1116
  12. 1210
  13. 132
  14. 14 
  15. 15 
  16. 1614
  17. 17152
  18. 1814
  19. 197
  20. 20 
  21. 213
  22. 2222
  23. 235
  24. 2416
  25. 2528
  26. 2610
  27. 274
  28. 283
  29. 2915
  30. 303
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Medium —
    CVE-2013-0282

    OpenStack Keystone allows context-dependent attackers to bypass access restrictions

    OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restr…

    keystone keystone Debian PyPI
  • Unscored —
    CVE-2013-0314

    The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 does not properly check authentication…

  • Unscored —
    CVE-2013-0315

    The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 allows remote attackers to read arbitr…

  • Medium 6.5
    CVE-2013-0270

    Keystone: openstack keystone: denial of service via large http request with long tenant name

    A flaw was found in OpenStack Keystone. A remote attacker could exploit this vulnerability by sending a large HTTP request, specifically by providing a long tenant name when requesting a token. This could lead to a denial of service, consuming excessive CPU a…

    Red Hat Red Hat OpenStack Platform 13 (Queens) Red Hat OpenStack Platform 18.0 Red Hat OpenStack Platform 16.2 Debian PyPI
  • Unscored —
    CVE-2013-1920

    Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM)…

  • Unscored —
    CVE-2013-3050 Public exploit

    SQL injection vulnerability in ZAPms 1.41 and earlier allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2012-6139

    libxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an …

    libxslt Debian
  • Unscored —
    CVE-2012-3532

    Cross-site request forgery (CSRF) vulnerability in the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.…

  • Unscored —
    CVE-2013-0501

    The EdrawSoft EDOFFICE.EDOfficeCtrl.1 ActiveX control, as used in Edraw Office Viewer Component, the client in IBM Cogn…

  • Unscored —
    CVE-2012-5937

    Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and…