Lucene search
+L

777 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2021-40085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a...

6.5CVSS6.5AI score0.01815EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/07/24 9:20 a.m.6 views

Security Bulletin: Improper Authorization in OpenStack Neutron Tagging Allows Unauthorized Network Tag Modification

Summary In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change add and clear tags on network objects that do not belong to th...

7.5CVSS5.8AI score0.00695EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:0 a.m.5 views

TencentOS Server 4: openstack-neutron (TSSA-2024:1085)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1085 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

6.5CVSS5.8AI score0.01305EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:0 a.m.5 views

TencentOS Server 4: openstack-neutron (TSSA-2024:1052)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1052 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

7.5CVSS5.8AI score0.00695EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 4:58 a.m.11 views

CVE-2023-6118

Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal. This issue affects IP Camera: before b1130.1.0.1...

7.5CVSS7.1AI score0.00761EPSS
SaveExploits0References1
Virtuozzo
Virtuozzo
added 2025/04/28 12:0 a.m.40 views

Virtuozzo Hybrid Infrastructure 6.3 Update 1 Hotfix 2 (6.3.1-121)

This update provides stability fixes. Vulnerability id: VSTOR-88806 Live migration failed for VMs with both vstorage and iSCSI volumes. Vulnerability id: VSTOR-89155 Fixed the false-positive alerts "Virtual machine state mismatch" and "Volume attachment details mismatch." Vulnerability id:...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/04/15 12:0 a.m.10 views

RHEL 7 : openstack-neutron (RHSA-2014:1942)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:1942 advisory. OpenStack Networking neutron is a pluggable, scalable, and API-driven system that provisions networking services to virtual machines. Its main functi...

4CVSS5.6AI score0.03936EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2025/04/15 12:0 a.m.11 views

RHEL 6 : openstack-neutron (RHSA-2014:1078)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:1078 advisory. OpenStack Networking Neutron is a pluggable, scalable, and API-driven system that provisions networking services to virtual machines. Its main functi...

4CVSS5.5AI score0.02209EPSS
SaveExploits0References5
vulnersOsv
vulnersOsv
added 2025/03/24 9:30 p.m.14 views

org.opendaylight.groupbasedpolicy:features-groupbasedpolicy (=0.7.4), org.opendaylight.groupbasedpolicy:odl-groupbasedpolicy-neutron-and-ofoverlay (>=0.5.0-Carbon <=0.7.4) +23 more potentially affected by CVE-2025-29313 via org.opendaylight.sfc:sfc-ovs (>=0.10.0 <=0.9.3)

org.opendaylight.sfc:sfc-ovs MAVEN version =0.10.0, =0.5.0-Carbon, =0.5.0-Carbon, =0.5.0-Carbon, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.6.0, =0.6.0, =0.4.0-Carbon, =0.5.0, =0.4.0-Carbon, =0.4.4-Carbon and more Source cves: CVE-2025-29313 Source advisory:...

7.5CVSS5.8AI score0.0037EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2024-53916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check f...

7.5CVSS5.7AI score0.00695EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2016-5363

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended MAC-spoofing protection mechanism...

8.2CVSS6.9AI score0.0324EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2016-5362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism...

8.2CVSS6.9AI score0.03411EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2015-8914

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechani...

9.1CVSS7.3AI score0.04248EPSS
SaveExploits1References2
Veracode
Veracode
added 2024/12/02 10:37 a.m.14 views

Incorrect ID During Policy Enforcement

neutron is vulnerable to an incorrect ID during policy enforcement. The vulnerability is due to an issue in neutron/extensions/tagging.py, where an incorrect ID is used, allowing attackers to manipulate network resources and leading to unauthorized access or bypassing security policies...

7.5CVSS7.1AI score0.00695EPSS
SaveExploits0References6Affected Software1
RedhatCVE
RedhatCVE
added 2024/11/25 7:22 p.m.23 views

CVE-2024-53916

A flaw was found in OpenStack Neutron. The service tagging policy engine insufficiently verifies the parent resource or the upper parent resource project ID when checking the policies against the caller project ID...

5.3CVSS6.6AI score0.00695EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2024/11/25 12:31 a.m.24 views

OpenStack Neutron can use an incorrect ID during policy enforcement

In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change add and clear tags on network objects that do not belong to the tenant...

7.5CVSS7.5AI score0.00695EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2024/11/25 12:31 a.m.15 views

GHSA-F27H-G923-68HW OpenStack Neutron can use an incorrect ID during policy enforcement

In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change add and clear tags on network objects that do not belong to the tenant...

7.5CVSS6.1AI score0.00695EPSS
SaveExploits0References7
NVD
NVD
added 2024/11/25 12:15 a.m.35 views

CVE-2024-53916

In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change add and clear tags on network objects that do not belong to the tenant...

7.5CVSS0.00695EPSS
SaveExploits0References5
OSV
OSV
added 2024/11/25 12:15 a.m.14 views

CVE-2024-53916

In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change add and clear tags on network objects that do not belong to the tenant...

7.5CVSS6.8AI score
SaveExploits0References5
OSV
OSV
added 2024/11/25 12:15 a.m.5 views

DEBIAN-CVE-2024-53916

In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change add and clear tags on network objects that do not belong to the tenant...

7.5CVSS5.7AI score0.00695EPSS
SaveExploits0References1
Rows per page
Query Builder