Archive
7 October 2016
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
High 7.4
flask-oidc Open Redirect vulnerability
flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect
-
High 7.5
Jetty vulnerable to exposure of sensitive information to unauthenticated remote users
The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak.
-
High 7.5
OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption
The image parser in OpenStack Cinder 7.0.2 and 8.0.0 through 8.1.1; Glance before 11.0.1 and 12.0.0; and Nova before 12.0.4 and 13.0.0 does not properly limit qemu-img calls, which might allow attackers to cause a denial of service (memory and disk consumptio…