Skip to content
OpenAdvisories

Archive

29 March 2017

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 5.5

    Apache Ambari reveals administrator passwords

    Apache Ambari 2.x before 2.4.0 includes KDC administrator passwords on the kadmin command line, which allows local users to obtain sensitive information via a process listing.

  • Medium 5.5

    OpenStack Glance Signature Verification Bypass

    The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision.

  • Medium 5.4

    Moodle Cross-site Scripting in the Course summary filter of the Add a new course

    In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element.