Skip to content
OpenAdvisories

Archive

15 April 2014

Vulnerabilities first published on this day (UTC), newest first.

← March 2014 2014 / April /15 May 2014 →
  1. 123
  2. 233
  3. 33
  4. 415
  5. 511
  6. 62
  7. 74
  8. 824
  9. 917
  10. 1037
  11. 1126
  12. 1220
  13. 13 
  14. 1415
  15. 1569
  16. 1697
  17. 1720
  18. 1818
  19. 1915
  20. 202
  21. 2116
  22. 2214
  23. 2346
  24. 249
  25. 2518
  26. 269
  27. 2719
  28. 2814
  29. 2932
  30. 3037
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2014-0167

    OpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests

    The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 does not enforce RBAC policies for (1) add_rules, (2) remove_rules, (3) destroy, and other unspecified methods in compute/api.py…

    nova nova Debian PyPI
  • Medium —
    CVE-2014-0157

    OpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting

    Cross-site scripting (XSS) vulnerability in the Horizon Orchestration dashboard in OpenStack Dashboard (aka Horizon) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to inject arbitrary web script or HTML via the description fie…

    horizon horizon Debian PyPI
  • Medium 6.0
    CVE-2014-0105

    python-keystoneclient vulnerable to context confusion in Keystone auth_token middleware

    The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstan…

    keystone python-keystoneclient python-keystoneclient Debian PyPI