Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CGA-73g2-frq9-22hx |
|
CGA-73g2-frq9-22hx |
| CGA-x8j2-77hx-4wg4 |
|
CGA-x8j2-77hx-4wg4 |
| CGA-9gcx-r236-858c |
|
CGA-9gcx-r236-858c |
| CGA-72cv-5vw6-pgjf |
|
CGA-72cv-5vw6-pgjf |
| MINI-76p2-695q-hg3p |
|
MINI-76p2-695q-hg3p |
| MINI-wc68-fmfc-h989 |
|
MINI-wc68-fmfc-h989 |
| CVE-2017-18191 |
|
Vulnerability in nova (CVE-2017-18191)
vulnerability in nova (CVE-2017-18191). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `16.1.2` or later.
|
| CVE-2018-12291 |
|
Vulnerability in matrix-synapse (CVE-2018-12291)
vulnerability in matrix-synapse (CVE-2018-12291). Confidential information can be exposed externally. Mitigation: upgrade to `0.31.1` or later.
|
| CVE-2016-9605 |
|
Cross-Site Scripting (XSS) in cobbler (CVE-2016-9605)
cross-site scripting in cobbler (CVE-2016-9605). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-3646 |
|
Information Disclosure in keystone (CVE-2015-3646)
vulnerability in keystone (CVE-2015-3646). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2014.2.4` or later.
|
| CVE-2014-0204 |
|
Privilege Escalation in keystone (CVE-2014-0204)
vulnerability in keystone (CVE-2014-0204). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0a0` or later.
|
| CVE-2014-3621 |
|
Information Disclosure in keystone (CVE-2014-3621)
vulnerability in keystone (CVE-2014-3621). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0a0` or later.
|
| CVE-2014-3476 |
|
Privilege Escalation in keystone (CVE-2014-3476)
vulnerability in keystone (CVE-2014-3476). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0a0` or later.
|
| CVE-2013-2014 |
|
Vulnerability in keystone (CVE-2013-2014)
vulnerability in keystone (CVE-2013-2014). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0a0` or later.
|
| CVE-2019-2435 |
|
Vulnerability in mysql-connector-python (CVE-2019-2435)
vulnerability in mysql-connector-python (CVE-2019-2435). Confidential information can be exposed externally.
|
| CVE-2014-3474 |
|
Cross-Site Scripting (XSS) in horizon (CVE-2014-3474)
cross-site scripting in horizon (CVE-2014-3474). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0a0` or later.
|
| CVE-2014-3473 |
|
Cross-Site Scripting (XSS) in horizon (CVE-2014-3473)
cross-site scripting in horizon (CVE-2014-3473). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0a0` or later.
|
| CVE-2014-3594 |
|
Cross-Site Scripting (XSS) in horizon (CVE-2014-3594)
cross-site scripting in horizon (CVE-2014-3594). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0a0` or later.
|
| CVE-2022-1592 |
|
SSRF (Server-Side Request Forgery) in scout-browser (CVE-2022-1592)
SSRF in scout-browser (CVE-2022-1592). Confidential information can be exposed externally. Mitigation: upgrade to `4.52` or later.
|
| CVE-2013-0282 |
|
Authentication Bypass in keystone (CVE-2013-0282)
authentication bypass in keystone (CVE-2013-0282). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0a0` or later.
|
| CVE-2016-4428 |
|
Cross-Site Scripting (XSS) in horizon (CVE-2016-4428)
cross-site scripting in horizon (CVE-2016-4428). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.1.0` or later.
|
| CVE-2016-4985 |
|
Information Disclosure in ironic (CVE-2016-4985)
vulnerability in ironic (CVE-2016-4985). Confidential information can be exposed externally. Mitigation: upgrade to `5.1.2` or later.
|
| CVE-2000-0483 |
|
Authentication Bypass in zope (CVE-2000-0483)
authentication bypass in zope (CVE-2000-0483). Risk of unauthorized operations or information disclosure.
|
| CVE-2013-2228 |
|
SaltStack RSA Key Generation allows remote users to decrypt communications
SaltStack RSA Key Generation allows remote users to decrypt communications
|
| CVE-2022-1554 |
|
Path Traversal in scout-browser (CVE-2022-1554)
path traversal in scout-browser (CVE-2022-1554). Data can be tampered with by attackers. Exploitable via ``send_file``. Mitigation: upgrade to `4.52` or later.
|
| CVE-2008-4571 |
|
Cross-Site Scripting (XSS) in plone (CVE-2008-4571)
cross-site scripting in plone (CVE-2008-4571). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.4` or later.
|
| CVE-2009-2737 |
|
Vulnerability in roundup (CVE-2009-2737)
vulnerability in roundup (CVE-2009-2737). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.7` or later.
|
| CVE-2009-0312 |
|
Cross-Site Scripting (XSS) in moin (CVE-2009-0312)
cross-site scripting in moin (CVE-2009-0312). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.2` or later.
|
| CVE-2009-0260 |
|
Cross-Site Scripting (XSS) in moin (CVE-2009-0260)
cross-site scripting in moin (CVE-2009-0260). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.1` or later.
|
| CVE-2008-2942 |
|
Path Traversal in mercurial (CVE-2008-2942)
path traversal in mercurial (CVE-2008-2942). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.2` or later.
|
| CVE-2008-1396 |
|
Vulnerability in plone (CVE-2008-1396)
vulnerability in plone (CVE-2008-1396). Risk of unauthorized operations or information disclosure.
|
| CVE-2008-1393 |
|
Vulnerability in plone (CVE-2008-1393)
vulnerability in plone (CVE-2008-1393). Risk of unauthorized operations or information disclosure. Exploitable via ``__ac``. Mitigation: upgrade to `3.0` or later.
|
| CVE-2008-1394 |
|
Vulnerability in plone (CVE-2008-1394)
vulnerability in plone (CVE-2008-1394). Risk of unauthorized operations or information disclosure. Exploitable via ``__ac``. Mitigation: upgrade to `3.0` or later.
|
| CVE-2007-2637 |
|
Vulnerability in moin (CVE-2007-2637)
vulnerability in moin (CVE-2007-2637). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.8` or later.
|
| CVE-2007-0902 |
|
Vulnerability in moin (CVE-2007-0902)
vulnerability in moin (CVE-2007-0902). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.8` or later.
|
| CVE-2007-0901 |
|
Cross-Site Scripting (XSS) in moin (CVE-2007-0901)
cross-site scripting in moin (CVE-2007-0901). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.8` or later.
|
| CVE-2008-1098 |
|
Cross-Site Scripting (XSS) in moin (CVE-2008-1098)
cross-site scripting in moin (CVE-2008-1098). Risk of unauthorized operations or information disclosure.
|
| CVE-2008-0781 |
|
Cross-Site Scripting (XSS) in moin (CVE-2008-0781)
cross-site scripting in moin (CVE-2008-0781). Risk of unauthorized operations or information disclosure.
|
| CVE-2008-1099 |
|
Vulnerability in moin (CVE-2008-1099)
vulnerability in moin (CVE-2008-1099). Risk of unauthorized operations or information disclosure. Exploitable via ``_macro_Getval``.
|
| CVE-2007-0857 |
|
Cross-Site Scripting (XSS) in moin (CVE-2007-0857)
cross-site scripting in moin (CVE-2007-0857). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.7` or later.
|
| CVE-2008-0782 |
|
Path Traversal in moin (CVE-2008-0782)
path traversal in moin (CVE-2008-0782). Risk of unauthorized operations or information disclosure.
|
| CVE-2008-0780 |
|
Cross-Site Scripting (XSS) in moin (CVE-2008-0780)
cross-site scripting in moin (CVE-2008-0780). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6.1` or later.
|
| CVE-2007-5201 |
|
Information Disclosure in duplicity (CVE-2007-5201)
vulnerability in duplicity (CVE-2007-5201). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.4.9` or later.
|
| CVE-2007-0404 |
|
Vulnerability in django (CVE-2007-0404)
vulnerability in django (CVE-2007-0404). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0` or later.
|
| CVE-2002-0687 |
|
Vulnerability in zope (CVE-2002-0687)
vulnerability in zope (CVE-2002-0687). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.1b2` or later.
|
| CVE-2000-1211 |
|
Authentication Bypass in zope (CVE-2000-1211)
authentication bypass in zope (CVE-2000-1211). Risk of unauthorized operations or information disclosure.
|
| CVE-2002-0170 |
|
Vulnerability in zope (CVE-2002-0170)
vulnerability in zope (CVE-2002-0170). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.1` or later.
|
| CVE-2000-1212 |
|
Vulnerability in zope (CVE-2000-1212)
vulnerability in zope (CVE-2000-1212). Risk of unauthorized operations or information disclosure.
|
| CVE-2005-2875 |
|
Unsafe Deserialization in py2play (CVE-2005-2875)
vulnerability in py2play (CVE-2005-2875). Risk of unauthorized operations or information disclosure.
|
| CVE-2002-0688 |
|
Vulnerability in zope (CVE-2002-0688)
vulnerability in zope (CVE-2002-0688). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6.0` or later.
|