Skip to content
OpenAdvisories

Archive

31 October 2014

Vulnerabilities first published on this day (UTC), newest first.

← September 2014 2014 / October /31 November 2014 →
  1. 18
  2. 254
  3. 330
  4. 429
  5. 56
  6. 628
  7. 720
  8. 842
  9. 96
  10. 1051
  11. 1111
  12. 122
  13. 1316
  14. 1411
  15. 15196
  16. 16126
  17. 1723
  18. 1825
  19. 19244
  20. 20146
  21. 21181
  22. 2219
  23. 2310
  24. 242
  25. 2521
  26. 2612
  27. 2716
  28. 289
  29. 2933
  30. 307
  31. 3129
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium —
    CVE-2014-3473

    Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name

    Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestrati…

    horizon horizon horizon Debian Ubuntu PyPI
  • Medium —
    CVE-2013-0334

    Bundler may install gems from a different source than expected

    Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source.

    bundler RubyGems
  • Medium —
    CVE-2014-3708

    OpenStack Compute (Nova) Denial of Service vulnerability

    OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request.

    nova nova Debian PyPI
  • Medium —
    CVE-2014-8333

    OpenStack Nova VMware instance leak potentially leading to compute DoS

    The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.

    nova nova Debian PyPI