Skip to content
OpenAdvisories

Archive

20 August 2013

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium —

    Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service

    Unspecified vulnerability in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.0.1, allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service. NOTE: th…

  • Medium —

    OpenStack Swift allows authenticated users to cause a denial of service

    OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service ("superfluous" tombstone consumption and Swift cluster slowdown) via a DELETE request with a timestamp that is older than expected.

  • Medium —

    Inefficient Algorithmic Complexity in Apache Santuario XML Security

    jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify …