Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CGA-73g2-frq9-22hx CGA-73g2-frq9-22hx
CGA-x8j2-77hx-4wg4 CGA-x8j2-77hx-4wg4
CGA-9gcx-r236-858c CGA-9gcx-r236-858c
CGA-72cv-5vw6-pgjf CGA-72cv-5vw6-pgjf
MINI-76p2-695q-hg3p MINI-76p2-695q-hg3p
MINI-wc68-fmfc-h989 MINI-wc68-fmfc-h989
CVE-2017-18191 Vulnerability in nova (CVE-2017-18191)
vulnerability in nova (CVE-2017-18191). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `16.1.2` or later.
CVE-2018-12291 Vulnerability in matrix-synapse (CVE-2018-12291)
vulnerability in matrix-synapse (CVE-2018-12291). Confidential information can be exposed externally. Mitigation: upgrade to `0.31.1` or later.
CVE-2016-9605 Cross-Site Scripting (XSS) in cobbler (CVE-2016-9605)
cross-site scripting in cobbler (CVE-2016-9605). Risk of unauthorized operations or information disclosure.
CVE-2015-3646 Information Disclosure in keystone (CVE-2015-3646)
vulnerability in keystone (CVE-2015-3646). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2014.2.4` or later.
CVE-2014-0204 Privilege Escalation in keystone (CVE-2014-0204)
vulnerability in keystone (CVE-2014-0204). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0a0` or later.
CVE-2014-3621 Information Disclosure in keystone (CVE-2014-3621)
vulnerability in keystone (CVE-2014-3621). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0a0` or later.
CVE-2014-3476 Privilege Escalation in keystone (CVE-2014-3476)
vulnerability in keystone (CVE-2014-3476). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0a0` or later.
CVE-2013-2014 Vulnerability in keystone (CVE-2013-2014)
vulnerability in keystone (CVE-2013-2014). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0a0` or later.
CVE-2019-2435 Vulnerability in mysql-connector-python (CVE-2019-2435)
vulnerability in mysql-connector-python (CVE-2019-2435). Confidential information can be exposed externally.
CVE-2014-3474 Cross-Site Scripting (XSS) in horizon (CVE-2014-3474)
cross-site scripting in horizon (CVE-2014-3474). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0a0` or later.
CVE-2014-3473 Cross-Site Scripting (XSS) in horizon (CVE-2014-3473)
cross-site scripting in horizon (CVE-2014-3473). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0a0` or later.
CVE-2014-3594 Cross-Site Scripting (XSS) in horizon (CVE-2014-3594)
cross-site scripting in horizon (CVE-2014-3594). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0a0` or later.
CVE-2022-1592 SSRF (Server-Side Request Forgery) in scout-browser (CVE-2022-1592)
SSRF in scout-browser (CVE-2022-1592). Confidential information can be exposed externally. Mitigation: upgrade to `4.52` or later.
CVE-2013-0282 Authentication Bypass in keystone (CVE-2013-0282)
authentication bypass in keystone (CVE-2013-0282). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0a0` or later.
CVE-2016-4428 Cross-Site Scripting (XSS) in horizon (CVE-2016-4428)
cross-site scripting in horizon (CVE-2016-4428). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.1.0` or later.
CVE-2016-4985 Information Disclosure in ironic (CVE-2016-4985)
vulnerability in ironic (CVE-2016-4985). Confidential information can be exposed externally. Mitigation: upgrade to `5.1.2` or later.
CVE-2000-0483 Authentication Bypass in zope (CVE-2000-0483)
authentication bypass in zope (CVE-2000-0483). Risk of unauthorized operations or information disclosure.
CVE-2013-2228 SaltStack RSA Key Generation allows remote users to decrypt communications
SaltStack RSA Key Generation allows remote users to decrypt communications
CVE-2022-1554 Path Traversal in scout-browser (CVE-2022-1554)
path traversal in scout-browser (CVE-2022-1554). Data can be tampered with by attackers. Exploitable via ``send_file``. Mitigation: upgrade to `4.52` or later.
CVE-2008-4571 Cross-Site Scripting (XSS) in plone (CVE-2008-4571)
cross-site scripting in plone (CVE-2008-4571). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.4` or later.
CVE-2009-2737 Vulnerability in roundup (CVE-2009-2737)
vulnerability in roundup (CVE-2009-2737). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.7` or later.
CVE-2009-0312 Cross-Site Scripting (XSS) in moin (CVE-2009-0312)
cross-site scripting in moin (CVE-2009-0312). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.2` or later.
CVE-2009-0260 Cross-Site Scripting (XSS) in moin (CVE-2009-0260)
cross-site scripting in moin (CVE-2009-0260). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.1` or later.
CVE-2008-2942 Path Traversal in mercurial (CVE-2008-2942)
path traversal in mercurial (CVE-2008-2942). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.2` or later.
CVE-2008-1396 Vulnerability in plone (CVE-2008-1396)
vulnerability in plone (CVE-2008-1396). Risk of unauthorized operations or information disclosure.
CVE-2008-1393 Vulnerability in plone (CVE-2008-1393)
vulnerability in plone (CVE-2008-1393). Risk of unauthorized operations or information disclosure. Exploitable via ``__ac``. Mitigation: upgrade to `3.0` or later.
CVE-2008-1394 Vulnerability in plone (CVE-2008-1394)
vulnerability in plone (CVE-2008-1394). Risk of unauthorized operations or information disclosure. Exploitable via ``__ac``. Mitigation: upgrade to `3.0` or later.
CVE-2007-2637 Vulnerability in moin (CVE-2007-2637)
vulnerability in moin (CVE-2007-2637). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.8` or later.
CVE-2007-0902 Vulnerability in moin (CVE-2007-0902)
vulnerability in moin (CVE-2007-0902). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.8` or later.
CVE-2007-0901 Cross-Site Scripting (XSS) in moin (CVE-2007-0901)
cross-site scripting in moin (CVE-2007-0901). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.8` or later.
CVE-2008-1098 Cross-Site Scripting (XSS) in moin (CVE-2008-1098)
cross-site scripting in moin (CVE-2008-1098). Risk of unauthorized operations or information disclosure.
CVE-2008-0781 Cross-Site Scripting (XSS) in moin (CVE-2008-0781)
cross-site scripting in moin (CVE-2008-0781). Risk of unauthorized operations or information disclosure.
CVE-2008-1099 Vulnerability in moin (CVE-2008-1099)
vulnerability in moin (CVE-2008-1099). Risk of unauthorized operations or information disclosure. Exploitable via ``_macro_Getval``.
CVE-2007-0857 Cross-Site Scripting (XSS) in moin (CVE-2007-0857)
cross-site scripting in moin (CVE-2007-0857). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.7` or later.
CVE-2008-0782 Path Traversal in moin (CVE-2008-0782)
path traversal in moin (CVE-2008-0782). Risk of unauthorized operations or information disclosure.
CVE-2008-0780 Cross-Site Scripting (XSS) in moin (CVE-2008-0780)
cross-site scripting in moin (CVE-2008-0780). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6.1` or later.
CVE-2007-5201 Information Disclosure in duplicity (CVE-2007-5201)
vulnerability in duplicity (CVE-2007-5201). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.4.9` or later.
CVE-2007-0404 Vulnerability in django (CVE-2007-0404)
vulnerability in django (CVE-2007-0404). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0` or later.
CVE-2002-0687 Vulnerability in zope (CVE-2002-0687)
vulnerability in zope (CVE-2002-0687). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.1b2` or later.
CVE-2000-1211 Authentication Bypass in zope (CVE-2000-1211)
authentication bypass in zope (CVE-2000-1211). Risk of unauthorized operations or information disclosure.
CVE-2002-0170 Vulnerability in zope (CVE-2002-0170)
vulnerability in zope (CVE-2002-0170). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.1` or later.
CVE-2000-1212 Vulnerability in zope (CVE-2000-1212)
vulnerability in zope (CVE-2000-1212). Risk of unauthorized operations or information disclosure.
CVE-2005-2875 Unsafe Deserialization in py2play (CVE-2005-2875)
vulnerability in py2play (CVE-2005-2875). Risk of unauthorized operations or information disclosure.
CVE-2002-0688 Vulnerability in zope (CVE-2002-0688)
vulnerability in zope (CVE-2002-0688). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6.0` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →