Skip to content
OpenAdvisories

Archive

November 2013

Vulnerabilities first published in this month (UTC), newest first.

← October 2013 2013 / November December 2013 →
  1. 110
  2. 224
  3. 3 
  4. 420
  5. 523
  6. 69
  7. 7 
  8. 814
  9. 94
  10. 10 
  11. 11 
  12. 1212
  13. 1349
  14. 147
  15. 1522
  16. 1630
  17. 17 
  18. 18 
  19. 1929
  20. 207
  21. 2114
  22. 2214
  23. 2360
  24. 245
  25. 256
  26. 268
  27. 2712
  28. 283
  29. 298
  30. 304
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low —
    CVE-2013-6374

    Jenkins Build Failure Analyzer Plugin allows Cross-Site Scripting (XSS)

    Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

    com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer Maven
  • Low —
    CVE-2013-4477

    OpenStack Identity Keystone Privilege Escalation vulnerability

    The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges.

    keystone keystone Debian PyPI
  • Low —
    CVE-2013-4469

    OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image

    OpenStack Compute (Nova) Folsom, Grizzly, and Havana, when use_cow_images is set to False, does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by transferring an image wi…

    nova nova Debian PyPI