Skip to content
OpenAdvisories

Archive

21 May 2013

Vulnerabilities first published on this day (UTC), newest first.

← April 2013 2013 / May /21 June 2013 →
  1. 121
  2. 221
  3. 314
  4. 43
  5. 55
  6. 6 
  7. 73
  8. 818
  9. 914
  10. 1025
  11. 11 
  12. 12 
  13. 1315
  14. 141
  15. 1531
  16. 1658
  17. 17 
  18. 18 
  19. 1923
  20. 20 
  21. 217
  22. 2218
  23. 2317
  24. 2416
  25. 2513
  26. 26 
  27. 277
  28. 284
  29. 2915
  30. 30 
  31. 317
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Unscored —
    CVE-2013-1977

    OpenStack devstack uses world-readable permissions for keystone.conf, which allows local users to obtain sensitive info…

  • Unscored —
    CVE-2013-1964

    Xen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a non-v1, non-transitive grant, which allows …

    xen Debian
  • Medium 4.3
    CVE-2013-2059

    OpenStack Identity (Keystone) improper revoking of the authentication token when deleting a user

    OpenStack Identity (Keystone) Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and Havana does not immediately revoke the authentication token when deleting a user through the Keystone v2 API, which allows remote authenticated users to retain access via …

    keystone keystone Debian PyPI
  • Unscored —
    CVE-2013-2007

    The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for …

  • Low —
    CVE-2013-2006 Public exploit

    OpenStack Keystone Sensitive information disclosure via log files

    OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by reading the log file.

    keystone keystone Debian PyPI
  • Unscored —
    CVE-2012-6137

    rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat Network Classic server's X…

  • Unscored —
    CVE-2007-6746

    telepathy-idle before 0.1.15 does not verify (1) that the issuer is a trusted CA, (2) that the server hostname matches …

    telepathy-idle Debian