Skip to content
OpenAdvisories

Archive

9 August 2017

Vulnerabilities first published on this day (UTC), newest first.

← July 2017 2017 / August /9 September 2017 →
  1. 129
  2. 268
  3. 313
  4. 438
  5. 523
  6. 610
  7. 7118
  8. 8316
  9. 984
  10. 1025
  11. 11100
  12. 12 
  13. 13 
  14. 1420
  15. 156
  16. 1620
  17. 1735
  18. 18176
  19. 195
  20. 205
  21. 2118
  22. 2226
  23. 2333
  24. 2436
  25. 2536
  26. 261
  27. 274
  28. 28104
  29. 2998
  30. 3051
  31. 3142
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.9
    CVE-2015-2674

    Restkit Does Not Validate TLS certificates

    Restkit allows man-in-the-middle attackers to spoof TLS servers by leveraging use of the ssl.wrap_socket function in Python with the default CERT_NONE value for the cert_reqs argument.

    restkit python-restkit Ubuntu PyPI
  • Medium 4.7
    CVE-2015-2687

    OpenStack Compute (Nova) Improper Access Control

    OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for.

    nova nova Debian PyPI
  • Medium 6.1
    CVE-2014-6393

    No Charset in Content-Type Header in express

    The Express web framework before 3.11 and 4.x before 4.5 for Node.js does not provide a charset field in HTTP Content-Type headers in 400 level responses, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via characters in a non…

    express node-express node-express Debian Ubuntu npm