Archive
29 March 2017
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
Medium 5.5
Apache Ambari reveals administrator passwords
Apache Ambari 2.x before 2.4.0 includes KDC administrator passwords on the kadmin command line, which allows local users to obtain sensitive information via a process listing.
-
Medium 5.5
OpenStack Glance Signature Verification Bypass
The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision.
-
Medium 5.4
Moodle Cross-site Scripting in the Course summary filter of the Add a new course
In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element.