Archive
10 September 2018
Vulnerabilities first published on this day (UTC), newest first.
11 results · Clear filters · Feed
-
Medium 5.3
Openstack Neutron vulnerable to eavesdropping on private traffic
Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended indefinitely if the instance's port is set administratively down prior to live-migration and kept down after the migrat…
-
Medium 4.7
The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build…
-
Medium 6.5
OpensStack Neutron Denial of Service Vulnerability
When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests …
-
Medium 5.3
An issue has been found in PowerDNS Authoritative Server before 3.4.11 and 4.0.2 allowing a remote, unauthenticated att…
-
Medium 5.5
A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to reco…
-
Medium 6.5
Drools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to …
-
Medium 4.3
foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize op…
-
Medium 4.3
foreman before version 1.15.0 is vulnerable to an information leak through organizations and locations feature. When a …
-
Medium 6.5
Monit before version 5.20.0 is vulnerable to a cross site request forgery attack. Successful exploitation will enable a…
-
Medium 6.2
IBM OpenPages GRC Platform 7.2, 7.3, 7.4, and 8.0 could allow an attacker to obtain sensitive information from error lo…
-
Medium 5.3
A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from w…