Skip to content
OpenAdvisories

Archive

7 January 2014

Vulnerabilities first published on this day (UTC), newest first.

← December 2013 2014 / January /7 February 2014 →
  1. 11
  2. 222
  3. 32
  4. 49
  5. 54
  6. 69
  7. 712
  8. 820
  9. 914
  10. 1024
  11. 114
  12. 1212
  13. 136
  14. 1412
  15. 15142
  16. 1633
  17. 177
  18. 188
  19. 199
  20. 207
  21. 2138
  22. 2219
  23. 2325
  24. 2423
  25. 256
  26. 2628
  27. 271
  28. 2813
  29. 2923
  30. 3017
  31. 318
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Unscored —
    CVE-2011-1166

    Xen, possibly before 4.0.2, allows local 64-bit PV guests to cause a denial of service (host crash) by specifying user …

    xen Debian
  • Unscored —
    CVE-2011-1936

    Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid in…

  • Unscored —
    CVE-2011-1780

    The instruction emulation in Xen 3.0.3 allows local SMP guest users to cause a denial of service (host crash) by replac…

  • Unscored —
    CVE-2011-1763

    The get_free_port function in Xen allows local authenticated DomU users to cause a denial of service or possibly gain p…

  • Unscored —
    CVE-2013-6436

    The lxcDomainGetMemoryParameters method in lxc/lxc_driver.c in libvirt 1.0.5 through 1.2.0 does not properly check the …

    libvirt Debian
  • Unscored —
    CVE-2013-4969

    Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.1 allows local user…

    puppet puppet Debian Azure Linux
  • Low —
    CVE-2013-6480 Public exploit

    Libcloud does not properly scrub data when destroying a DigitalOcean node

    Libcloud 0.12.3 through 0.13.2 does not set the scrub_data parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM.

    apache-libcloud PyPI
  • Medium —
    CVE-2013-6419

    OpenStack Nova Router metadata queries are not restricted by tenant

    Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port,…

    nova nova neutron Debian PyPI
  • Unscored —
    CVE-2013-4564

    Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version …

  • Unscored —
    CVE-2013-6888

    Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.

    devscripts Debian
  • Unscored —
    CVE-2013-6881 Public exploit EPSS 13%

    CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to execute arbitrary commands v…

  • Unscored —
    CVE-2013-6884 Public exploit EPSS 10%

    The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default "ditto" username and…