Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2022-29773 Authorization Flaw in aleksis-core (CVE-2022-29773)
vulnerability in aleksis-core (CVE-2022-29773). Confidential information can be exposed externally. Mitigation: upgrade to `2.9` or later.
CVE-2022-33146 Open Redirect in web2py (CVE-2022-33146)
vulnerability in web2py (CVE-2022-33146). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.22.5` or later.
CVE-2019-11340 Vulnerability in matrix-sydent (CVE-2019-11340)
vulnerability in matrix-sydent (CVE-2019-11340). Data can be tampered with by attackers. Mitigation: upgrade to `1.0.2` or later.
CVE-2019-13594 Cross-Site Request Forgery (CSRF) in saleor (CVE-2019-13594)
vulnerability in saleor (CVE-2019-13594). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.8.0` or later.
CVE-2020-35459 Privilege Escalation in crmsh (CVE-2020-35459)
vulnerability in crmsh (CVE-2020-35459). Successful exploitation can lead to full system takeover.
CVE-2020-15703 Information Disclosure in aptdaemon (CVE-2020-15703)
vulnerability in aptdaemon (CVE-2020-15703). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1.1` or later.
CVE-2021-38155 Vulnerability in keystone (CVE-2021-38155)
vulnerability in keystone (CVE-2021-38155). Confidential information can be exposed externally. Mitigation: upgrade to `19.0.1` or later.
CVE-2019-14322 Path Traversal in werkzeug (CVE-2019-14322)
path traversal in werkzeug (CVE-2019-14322). Confidential information can be exposed externally. Mitigation: upgrade to `0.15.5` or later.
CVE-2019-13628 Vulnerability in wolfcrypt (CVE-2019-13628)
vulnerability in wolfcrypt (CVE-2019-13628). Confidential information can be exposed externally. Mitigation: upgrade to `4.1.0` or later.
CVE-2019-10047 Cross-Site Scripting (XSS) in pydio (CVE-2019-10047)
cross-site scripting in pydio (CVE-2019-10047). Risk of unauthorized operations or information disclosure.
CVE-2015-9543 Information Disclosure in nova (CVE-2015-9543)
vulnerability in nova (CVE-2015-9543). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `20.1.0` or later.
CVE-2011-2185 Vulnerability in fabric (CVE-2011-2185)
vulnerability in fabric (CVE-2011-2185). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1.0` or later.
CVE-2013-1665 Information Disclosure in django (CVE-2013-1665)
vulnerability in django (CVE-2013-1665). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.4` or later.
CVE-2013-1664 XXE (XML External Entity) in django (CVE-2013-1664)
vulnerability in django (CVE-2013-1664). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.4` or later.
CVE-2010-2235 Code Injection in cobbler (CVE-2010-2235)
code injection in cobbler (CVE-2010-2235). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.7` or later.
CVE-2012-2395 Command Injection in cobbler (CVE-2012-2395)
command injection in cobbler (CVE-2012-2395). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6.0` or later.
CVE-2011-3587 Vulnerability in zope2 (CVE-2011-3587)
vulnerability in zope2 (CVE-2011-3587). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.13.10` or later.
CVE-2013-4278 Vulnerability in nova (CVE-2013-4278)
vulnerability in nova (CVE-2013-4278). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.0.0a0` or later.
CVE-2011-1340 Cross-Site Scripting (XSS) in plone (CVE-2011-1340)
cross-site scripting in plone (CVE-2011-1340). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.3` or later.
CVE-2011-4030 Vulnerability in plone (CVE-2011-4030)
vulnerability in plone (CVE-2011-4030). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.2a3` or later.
CVE-2014-0056 Authentication Bypass in neutron (CVE-2014-0056)
authentication bypass in neutron (CVE-2014-0056). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2013.2.3` or later.
CVE-2014-0162 Vulnerability in glance (CVE-2014-0162)
vulnerability in glance (CVE-2014-0162). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2013.2.4` or later.
CVE-2013-4155 Buffer Overflow in swift (CVE-2013-4155)
vulnerability in swift (CVE-2013-4155). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.9.1` or later.
CVE-2014-3242 XXE (XML External Entity) in soappy (CVE-2014-3242)
vulnerability in soappy (CVE-2014-3242). Risk of unauthorized operations or information disclosure.
CVE-2013-2209 Cross-Site Scripting (XSS) in reviewboard (CVE-2013-2209)
cross-site scripting in reviewboard (CVE-2013-2209). Data can be tampered with by attackers. Mitigation: upgrade to `1.7.10` or later.
CVE-2013-2030 Vulnerability in python-keystoneclient (CVE-2013-2030)
vulnerability in python-keystoneclient (CVE-2013-2030). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.2.4` or later.
CVE-2013-4179 Buffer Overflow in nova (CVE-2013-4179)
vulnerability in nova (CVE-2013-4179). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2013.2` or later.
CVE-2013-2096 Vulnerability in nova (CVE-2013-2096)
vulnerability in nova (CVE-2013-2096). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.0.0a0` or later.
CVE-2013-4477 Vulnerability in keystone (CVE-2013-4477)
vulnerability in keystone (CVE-2013-4477). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0a0` or later.
CVE-2014-3243 Buffer Overflow in soappy (CVE-2014-3243)
vulnerability in soappy (CVE-2014-3243). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.12.6` or later.
CVE-2013-4497 Vulnerability in nova (CVE-2013-4497)
vulnerability in nova (CVE-2013-4497). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.0.0a0` or later.
CVE-2013-6419 Information Disclosure in nova (CVE-2013-6419)
vulnerability in nova (CVE-2013-6419). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.0.0a0` or later.
CVE-2016-5363 Vulnerability in neutron (CVE-2016-5363)
vulnerability in neutron (CVE-2016-5363). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.1.0` or later.
CVE-2016-0737 Vulnerability in swift (CVE-2016-0737)
vulnerability in swift (CVE-2016-0737). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.0` or later.
CVE-2014-3497 Cross-Site Scripting (XSS) in swift (CVE-2014-3497)
cross-site scripting in swift (CVE-2014-3497). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.0` or later.
CVE-2014-0167 Vulnerability in nova (CVE-2014-0167)
vulnerability in nova (CVE-2014-0167). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2013.2.4` or later.
CVE-2016-0757 Vulnerability in glance (CVE-2016-0757)
vulnerability in glance (CVE-2016-0757). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.0.2` or later.
CVE-2014-9623 Vulnerability in glance (CVE-2014-9623)
vulnerability in glance (CVE-2014-9623). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.0.0a0` or later.
CVE-2014-5356 Vulnerability in glance (CVE-2014-5356)
vulnerability in glance (CVE-2014-5356). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.0.0a0` or later.
CVE-2011-4953 Vulnerability in cobbler (CVE-2011-4953)
vulnerability in cobbler (CVE-2011-4953). Risk of unauthorized operations or information disclosure. Exploitable via ``set_mgmt_parameters``. Mitigation: upgrade to `2.6.0` or later.
CVE-2015-1851 Information Disclosure in cinder (CVE-2015-1851)
vulnerability in cinder (CVE-2015-1851). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.0a0` or later.
CVE-2015-5251 Authorization Flaw in glance (CVE-2015-5251)
vulnerability in glance (CVE-2015-5251). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2015.1.2` or later.
CVE-2016-4808 Cross-Site Request Forgery (CSRF) in web2py (CVE-2016-4808)
vulnerability in web2py (CVE-2016-4808). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.14.6` or later.
CVE-2016-4807 Cross-Site Scripting (XSS) in web2py (CVE-2016-4807)
cross-site scripting in web2py (CVE-2016-4807). Risk of unauthorized operations or information disclosure.
CVE-2016-0738 Vulnerability in swift (CVE-2016-0738)
vulnerability in swift (CVE-2016-0738). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.1` or later.
CVE-2013-4463 Vulnerability in nova (CVE-2013-4463)
vulnerability in nova (CVE-2013-4463). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.0.0a0` or later.
CVE-2013-4469 Vulnerability in nova (CVE-2013-4469)
vulnerability in nova (CVE-2013-4469). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.0.0a0` or later.
CVE-2015-5240 Vulnerability in neutron (CVE-2015-5240)
vulnerability in neutron (CVE-2015-5240). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.0` or later.
CVE-2018-10657 Vulnerability in matrix-synapse (CVE-2018-10657)
vulnerability in matrix-synapse (CVE-2018-10657). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.28.1` or later.
CVE-2011-0728 Cross-Site Scripting (XSS) in loggerhead (CVE-2011-0728)
cross-site scripting in loggerhead (CVE-2011-0728). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.18.1` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →