Skip to content
OpenAdvisories

Archive

1 April 2015

Vulnerabilities first published on this day (UTC), newest first.

← March 2015 2015 / April /1 May 2015 →
  1. 140
  2. 2 
  3. 330
  4. 42
  5. 56
  6. 615
  7. 72
  8. 822
  9. 9 
  10. 1079
  11. 113
  12. 12 
  13. 1319
  14. 1464
  15. 1510
  16. 1692
  17. 1711
  18. 184
  19. 1917
  20. 20 
  21. 2164
  22. 225
  23. 232
  24. 2420
  25. 25 
  26. 266
  27. 275
  28. 285
  29. 2915
  30. 30 
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2015-0259

    OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity

    OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage.

    nova nova Debian PyPI