Skip to content
OpenAdvisories

Archive

May 2014

Vulnerabilities first published in this month (UTC), newest first.

← April 2014 2014 / May June 2014 →
  1. 112
  2. 238
  3. 3 
  4. 4 
  5. 515
  6. 611
  7. 713
  8. 852
  9. 96
  10. 102
  11. 115
  12. 1221
  13. 1317
  14. 1465
  15. 158
  16. 1621
  17. 175
  18. 181
  19. 1927
  20. 2033
  21. 2114
  22. 2247
  23. 2325
  24. 246
  25. 253
  26. 2626
  27. 2726
  28. 282
  29. 2918
  30. 3025
  31. 316
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low 1.2
    CVE-2014-2343

    Triangle MicroWorks SCADA Data Gateway Resource Exhaustion

    Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service (excessive data processing) via a crafted DNP request over a serial line.

    Triangle MicroWorks SCADA Data Gateway
  • Low —
    CVE-2014-3801

    OpenStack Heat template URL information leakage

    OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.

    heat heat openstack-heat Debian Ubuntu PyPI
  • Low 2.4
    CVE-2014-2350

    Emerson DeltaV Use of Hard-coded Credentials

    Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrated by a session that uses the telnet program.

    Emerson DeltaV
  • Low 3.7
    CVE-2013-4347

    SimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces

    The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack.

    oauth2 PyPI
  • Low 3.1
    CVE-2014-0134

    OpenStack Nova host data leak to vm instance in rescue mode

    The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting …

    nova nova Debian PyPI
  • Low —
    CVE-2014-0135

    Kafo allows local users to obtain passwords and other sensitive information by reading default_values.yaml

    Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable permissions for default_values.yaml, which allows local users to obtain passwords and other sensitive information by reading the file.

    kafo RubyGems