Skip to content
OpenAdvisories

Archive

25 August 2014

Vulnerabilities first published on this day (UTC), newest first.

← July 2014 2014 / August /25 September 2014 →
  1. 113
  2. 2 
  3. 35
  4. 4 
  5. 5 
  6. 620
  7. 725
  8. 8 
  9. 9 
  10. 10 
  11. 117
  12. 1279
  13. 1312
  14. 1424
  15. 156
  16. 163
  17. 1717
  18. 1810
  19. 1920
  20. 2018
  21. 2112
  22. 2230
  23. 237
  24. 24 
  25. 2516
  26. 2621
  27. 2712
  28. 2813
  29. 2924
  30. 302
  31. 315
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.3
    CVE-2014-5455 Public exploit

    Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and Op…

  • Medium 6.5
    CVE-2014-5253

    OpenStack Keystone Domain-scoped tokens don't get revoked

    OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 does not properly revoke tokens when a domain is invalidated, which allows remote authenticated users to retain access via a domain-scoped token for that domain.

    keystone keystone keystone Debian Ubuntu PyPI
  • Medium 6.5
    CVE-2014-5252

    OpenStack Identity (Keystone) UUID v2 tokens does not expire with revocation events

    The V3 API in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 updates the issued_at value for UUID v2 tokens, which allows remote authenticated users to bypass the token expiration and retain access via a verification (1) GET o…

    keystone keystone keystone Debian Ubuntu PyPI
  • Medium —
    CVE-2014-5356

    OpenStack Glance improper validation of the image_size_cap configuration option

    OpenStack Image Registry and Delivery Service (Glance) before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the image_size_cap configuration option, which allows remote authenticated users to cause …

    glance glance glance Debian Ubuntu PyPI
  • Medium 6.5
    CVE-2014-5251

    OpenStack Identity (Keystone) Multiple vulnerabilities in revocation events

    The MySQL token driver in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 stores timestamps with the incorrect precision, which causes the expiration comparison for tokens to fail and allows remote authenticated users to retain…

    keystone keystone keystone Debian Ubuntu PyPI