Archive
8 May 2014
Vulnerabilities first published on this day (UTC), newest first.
52 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in the SemanticTitle extension before 1.1.0 for MediaWiki allows remote attack…
-
Unscored —
Cross-site scripting (XSS) vulnerability in falha.php in the Bradesco Gateway plugin 2.0 for Wordpress, as used in the …
-
Unscored —
Foreman before 1.1 uses a salt of "foreman" to hash root passwords, which makes it easier for attackers to guess the pa…
-
Unscored —
Foreman before 1.1 allows remote authenticated users to gain privileges via a (1) XMLHttpRequest or (2) AJAX request.
-
Unscored —
The smart proxy Puppet run API in Foreman before 1.2.0 allows remote attackers to execute arbitrary commands via vector…
-
Unscored —
varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files in the directory, w…
-
Unscored —
Foreman before 1.1 allows remote attackers to execute arbitrary code via a crafted YAML object to the (1) fact or (2) r…
-
Unscored —
The external node classifier (ENC) API in Foreman before 1.1 allows remote attackers to obtain the hashed root password…
-
Unscored —
The pam_userdb module for Pam uses a case-insensitive method to compare hashed passwords, which makes it easier for att…
-
Unscored —
hw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial of service or possibl…
-
Unscored —
GNU Rush 1.7 does not properly drop privileges, which allows local users to read arbitrary files via the --lint option.
-
Medium —
Jenkins Subversion Plugin Stores Credentials with Base64 Encoding
The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading a subversion.credentials file.
-
Unscored —
socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is e…
-
Unscored —
The smart proxy in Foreman before 1.1 uses a umask set to 0, which allows local users to modify files created by the da…
-
Low 3.1
OpenStack Nova host data leak to vm instance in rescue mode
The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting …
-
Unscored —
Session fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web sessions via the session i…
-
Medium —
OpenStack Neutron Improper Authentication vulnerability
The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in a port-create command.
-
Medium —
Uncontrolled Resource Consumption in Apache CXF
Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error.
-
Unscored —
The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereferenc…
-
Unscored —
Foreman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews, which allows remote att…
-
Medium —
Uncontrolled Resource Consumption in Apache CXF
Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message.
-
Low —
Kafo allows local users to obtain passwords and other sensitive information by reading default_values.yaml
Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable permissions for default_values.yaml, which allows local users to obtain passwords and other sensitive information by reading the file.
-
Medium 4.5
eyeD3 is vulnerable to arbitrary file modification via symlink attack
tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.
-
Unscored —
The Frontend in Zabbix before 1.8.20rc2, 2.0.x before 2.0.11rc2, and 2.2.x before 2.2.2rc1 allows remote "Zabbix Admin"…
-
Unscored —
The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users…
-
Unscored —
Cross-site scripting (XSS) vulnerability in wserver.ml in SKS Keyserver before 1.1.5 allows remote attackers to inject …
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin/manage-images.php in the NextCellent Gallery plugin before 1.19.18 fo…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Fortinet FortiWeb befor…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Offiria 2.1.0 and earlier allows remote attackers to inject arbitrary web s…
-
Unscored —
Symantec Critical System Protection (SCSP) before 5.2.9, when installed on an unpatched Windows Server 2003 R2 platform…
-
Unscored —
The ptrace system call in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.x, allows local users to cause a denial of service (s…
-
Unscored —
/opt/novell/ncl/bin/nwrights in Novell Client for Linux in Novell Open Enterprise Server (OES) 11 Linux SP2 does not pr…
-
High —
ClassLoader manipulation in Apache Struts
CookieInterceptor in Apache Struts 2.x before 2.3.20, when a wildcard cookiesName value is used, does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and modify session state via a crafted req…
-
Unscored —
Cross-site scripting (XSS) vulnerability on Google Search Appliance (GSA) devices before 7.0.14.G.216 and 7.2 before 7.…
-
Unscored —
The Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager (ISAM) for Web 7.0 befo…
-
Unscored —
lisp/net/tramp-sh.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack…
-
Unscored —
seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs in a way that changes …
-
Unscored —
NCSA Mosaic 2.1 through 2.7b5 allows local users to cause a denial of service ("remote control" outage) by creating a /…
-
Unscored —
NCSA Mosaic 2.0 and earlier allows local users to cause a denial of service ("remote control" outage) by creating a /tm…
-
Unscored —
lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink …