Lucene search
+L

8329 matches found

Prion
Prion
added 2022/03/23 8:15 p.m.23 views

Information disclosure

An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the wwwauthenticateuri parameter which is visible to all end users in configuration files. This would give sensitive...

4CVSS4.1AI score0.00785EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2022/03/23 7:46 p.m.61 views

CVE-2021-4180

An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the wwwauthenticateuri parameter which is visible to all end users in configuration files. This would give sensitive...

4.5AI score0.00785EPSS
SaveExploits0References1
CVE
CVE
added 2022/03/23 7:46 p.m.167 views

CVE-2021-4180

The CVE affects openstack-tripleo-heat-templates (older than 11.6.1). The underlying issue is an information exposure: an external user can discover internal IP addresses or hostnames by inspecting the www_authenticate_uri parameter in configuration files. This data leakage is specifically tied t...

4.3CVSS4AI score0.00785EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
added 2022/03/23 12:00 a.m.10 views

openstack-tripleo-heat-templates 信息泄露漏洞

openstack-tripleo-heat-templates is a set of templates and tools for building Heat templates for OpenStack deployment. A security vulnerability exists in openstack-tripleo-heat-templates that stems from the fact that an attacker can exploit this by checking the wwwauthenticateuri parameter visibl...

4.3CVSS5.1AI score0.00785EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2022/03/22 12:00 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2022:0910-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.7CVSS6AI score0.00491EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2022/03/16 12:00 a.m.32 views

SUSE: Security Advisory (SUSE-SU-2022:0871-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.3AI score0.08346EPSS
SaveExploits0References19
OpenVAS
OpenVAS
added 2022/03/16 12:00 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2022:0860-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.73188EPSS
SaveExploits2References8
OpenVAS
OpenVAS
added 2022/03/12 12:00 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2022:0811-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.6AI score0.16214EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2022/03/10 12:00 a.m.36 views

SUSE: Security Advisory (SUSE-SU-2022:0782-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.1AI score0.00689EPSS
SaveExploits8References7
OpenVAS
OpenVAS
added 2022/03/10 12:00 a.m.15 views

SUSE: Security Advisory (SUSE-SU-2022:0777-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS8.7AI score0.14261EPSS
SaveExploits2References6
OpenVAS
OpenVAS
added 2022/03/09 12:00 a.m.18 views

SUSE: Security Advisory (SUSE-SU-2022:0762-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.7AI score0.05528EPSS
SaveExploits13References17
OpenVAS
OpenVAS
added 2022/03/05 12:00 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2022:0733-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS9AI score0.0198EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2022/03/05 12:00 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2022:0734-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.01381EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2022/03/04 12:00 a.m.37 views

Open Redirect in CPython that affects users of OpenStack Nova

A vulnerability was found in CPython which is used by openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL...

6.1CVSS6.4AI score0.26792EPSS
SaveExploits1References10Affected Software1
OSV
OSV
added 2022/03/04 12:00 a.m.32 views

GHSA-VQP6-J452-J6WP Open Redirect in CPython that affects users of OpenStack Nova

A vulnerability was found in CPython which is used by openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL...

6.1CVSS6.1AI score0.26792EPSS
SaveExploits1References10
NVD
NVD
added 2022/03/02 11:15 p.m.29 views

CVE-2021-3654

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL...

6.1CVSS0.26792EPSS
SaveExploits1References8
OSV
OSV
added 2022/03/02 11:15 p.m.2 views

DEBIAN-CVE-2021-3654

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL...

6.1CVSS6.8AI score0.26792EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/03/02 11:15 p.m.7 views

CVE-2021-3654

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL...

6.1CVSS6.7AI score0.26792EPSS
SaveExploits1References10
OSV
OSV
added 2022/03/02 11:15 p.m.27 views

CVE-2021-3654

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL...

6.1CVSS6.1AI score
SaveExploits0References8
Prion
Prion
added 2022/03/02 11:15 p.m.24 views

Design/Logic Flaw

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL...

4CVSS6AI score0.26792EPSS
SaveExploits1References8Affected Software2
Rows per page
Query Builder