DEBIAN-CVE-2013-4412

slim has NULL pointer dereference when using crypt method from glibc 2.17...

CVE-2013-4423

CloudForms stores user passwords in recoverable format...

CVE-2013-4518

Affected product: RHUI (Red Hat Update Infrastructure) 2.1.3. The vulnerability involves world‑readable PKI entitlement certificates, enabling information disclosure of sensitive PKI data. Root cause details are not fully specified in the provided documents, but the CNVD entry explicitly notes an...

CVE-2013-4423

CloudForms (Red Hat CloudForms) is affected by CVE-2013-4423, where user passwords are stored in a recoverable format, enabling potential disclosure of cleartext passwords. The vulnerability concerns the storage mechanism rather than a specific exploit, and public details describe an information ...

CVE-2013-4412

CVE-2013-4412 affects slim, with a NULL pointer dereference when using the crypt() function from glibc 2.17. The connected records confirm the description across multiple sources (NVD, OSV, Ubuntu/Debian advisories, and vendor entries), but none provide concrete details on affected versions beyon...

CVE-2013-4168

Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...

UBUNTU-CVE-2013-4168

Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...

CVE-2013-0180

Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds...

CVE-2013-0178

Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm...

CVE-2013-0165

cartridges/openshift-origin-cartridge-mongodb-2.2/info/bin/dump.sh in OpenShift does not properly create files in /tmp...

CVE-2013-4168

CVE-2013-4168 is a documented cross-site scripting (XSS) vulnerability in SmokePing 2.6.9, specifically affecting the start and end time fields. The issue is described as XSS in these input fields, with CVSS scores provided (NVD CVSSv2 base 4.3, CVSSv3.1 base 6.1) indicating a network-based entry...

CVE-2013-4168

Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...

CVE-2013-0186

CVE-2013-0186 covers multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM. The affected component is ManageIQ EVM; the underlying root cause is not explicitly described in the provided documents, but the NVD entry notes remote code injection via unspecified vectors with user intera...

CVE-2013-0186

Multiple cross-site scripting XSS vulnerabilities in ManageIQ EVM allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-2255

OpenStack CVE-2013-2255 affects HTTPSConnections in Keystone (2013) and OpenStack Compute (2013.1), and possibly other OpenStack components. Root cause: server-side SSL certificate validation is not performed, allowing potential impersonation or man-in-the-middle scenarios where untrusted certifi...

CVE-2013-0180

CVE-2013-0180 affects Redis 2.6 and is described as an insecure temporary file vulnerability related to /tmp/redis.ds. The connected sources consistently state this issue but do not provide concrete remediation details or a patch version. CVSS indicates local access with low base severity (3.6/5....

CVE-2013-0178

CVE-2013-0178 affects Redis before 2.6, with an insecure temporary file vulnerability related to /tmp/redis-%p.vm. The connected documents confirm the affected software and the insecure temp-file root cause but do not provide exploitation details, impact specifics, or any remediation/patch inform...

CVE-2013-0165

CVE-2013-0165 affects OpenShift: the cartridges/openshift-origin-cartridge-mongodb-2.2/info/bin/dump.sh script does not properly create files in /tmp. Affected component is the dump.sh script within the OpenShift MongoDB cartridge (version 2.2). Underlying issue is improper file creation in /tmp,...

CVE-2013-4367

ovirt-engine 3.2 running on Linux kernel 3.1 and newer creates certain files world-writeable due to an upstream kernel change which impacted how python's os.chmod works when passed a mode of '-1'...

CVE-2013-4367

CVE-2013-4367 affects ovirt-engine 3.2 running on Linux kernel 3.1 and newer, where upstream kernel behavior change with os.chmod(-1) causes certain files to become world-writable. This is a local attacker issue with potential exposure of sensitive data, as reflected by CVSS metrics (NVD CVSSv3.1...