Lucene search
K

7717 matches found

OSV
OSV
added 2014/05/14 7:55 p.m.0 views

DEBIAN-CVE-2013-4471

The Identity v3 API in OpenStack Dashboard Horizon before 2013.2 does not require the current password when changing passwords for user accounts, which makes it easier for remote attackers to change a user password by leveraging the authentication token for that user...

5.5CVSS7AI score0.00181EPSS
Exploits0References1
Prion
Prion
added 2014/05/14 7:55 p.m.14 views

Design/Logic Flaw

The Identity v3 API in OpenStack Dashboard Horizon before 2013.2 does not require the current password when changing passwords for user accounts, which makes it easier for remote attackers to change a user password by leveraging the authentication token for that user...

5.5CVSS7.5AI score0.00181EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2014/05/14 7:55 p.m.18 views

CVE-2013-4471

The Identity v3 API in OpenStack Dashboard Horizon before 2013.2 does not require the current password when changing passwords for user accounts, which makes it easier for remote attackers to change a user password by leveraging the authentication token for that user...

5.5CVSS5.9AI score0.00181EPSS
Exploits0References3
CVE
CVE
added 2014/05/14 7:0 p.m.48 views

CVE-2013-4471

CVE-2013-4471 concerns the Identity v3 API in OpenStack Dashboard (Horizon) prior to 2013.2, where the password-change flow does not require the current password, allowing an attacker with a valid authentication token to change a user’s password. Affected component: Horizon’s Identity v3 password...

5.5CVSS7.1AI score0.00181EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2014/05/14 7:0 p.m.17 views

CVE-2013-4471

The Identity v3 API in OpenStack Dashboard Horizon before 2013.2 does not require the current password when changing passwords for user accounts, which makes it easier for remote attackers to change a user password by leveraging the authentication token for that user...

5.5CVSS6.9AI score0.00181EPSS
Exploits0
Cvelist
Cvelist
added 2014/05/14 7:0 p.m.21 views

CVE-2013-4471

The Identity v3 API in OpenStack Dashboard Horizon before 2013.2 does not require the current password when changing passwords for user accounts, which makes it easier for remote attackers to change a user password by leveraging the authentication token for that user...

6.9AI score0.00181EPSS
Exploits0References2
Fedora
Fedora
added 2014/05/13 5:3 a.m.28 views

[SECURITY] Fedora 20 Update: openstack-glance-2013.2.3-3.fc20

OpenStack Image Service code-named Glance provides discovery, registratio n, and delivery services for virtual disk images. The Image Service API server provides a standard REST interface for querying information about virtual d isk images stored in a variety of back-end stores, including OpenSta...

6CVSS6.2AI score0.00557EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2014/05/13 12:0 a.m.29 views

Fedora 20 : openstack-glance-2013.2.3-3.fc20 (2014-5198)

OpenStack Security Advisory: 2014-012 CVE: CVE-2014-0162 Date: April 10, 2014 Title: Remote code execution in Glance Sheepdog backend Reporter: Paul McMillan Nebula Products: Glance Versions: from 2013.2 to 2013.2.3 Description: Paul McMillan from Nebula reported a vulnerability in Glance Sheepdo...

6CVSS6.1AI score0.00557EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2014/05/12 12:0 a.m.33 views

Ubuntu: Security Advisory (USN-2208-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.5AI score0.00456EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2014/05/12 12:0 a.m.33 views

Ubuntu: Security Advisory (USN-2206-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.5AI score0.00264EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2014/05/12 12:0 a.m.31 views

Ubuntu Update for quantum USN-2208-2

Check for the Version of quantum OpenVAS Vulnerability Test $Id: gbubuntuUSN22082.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for quantum USN-2208-2 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software...

4.3CVSS0.00456EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2014/05/12 12:0 a.m.19 views

Ubuntu: Security Advisory (USN-2194-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.1CVSS6.5AI score0.00216EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2014/05/12 12:0 a.m.18 views

Ubuntu: Security Advisory (USN-2207-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.5AI score0.00421EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2014/05/12 12:0 a.m.23 views

Ubuntu Update for horizon USN-2206-1

Check for the Version of horizon OpenVAS Vulnerability Test $Id: gbubuntuUSN22061.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for horizon USN-2206-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software...

4.3CVSS6.4AI score0.00264EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2014/05/12 12:0 a.m.24 views

Ubuntu: Security Advisory (USN-2193-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6CVSS6.5AI score0.00557EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2014/05/12 12:0 a.m.25 views

Ubuntu Update for swift USN-2207-1

Check for the Version of swift OpenVAS Vulnerability Test $Id: gbubuntuUSN22071.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for swift USN-2207-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

4.3CVSS6.4AI score0.00421EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2014/05/12 12:0 a.m.28 views

Ubuntu Update for glance USN-2193-1

Check for the Version of glance OpenVAS Vulnerability Test $Id: gbubuntuUSN21931.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for glance USN-2193-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...

6CVSS6.4AI score0.00557EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2014/05/12 12:0 a.m.25 views

Ubuntu: Security Advisory (USN-2208-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.5AI score0.00456EPSS
Exploits0References2
OSV
OSV
added 2014/05/08 2:29 p.m.1 views

DEBIAN-CVE-2014-0134

The instance rescue mode in OpenStack Compute Nova 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and usecowimages is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image...

3.5CVSS6.6AI score0.00201EPSS
Exploits0References1
OSV
OSV
added 2014/05/08 2:29 p.m.5 views

CVE-2014-0134

The instance rescue mode in OpenStack Compute Nova 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and usecowimages is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image...

5.9AI score
Exploits0References3
Rows per page
Query Builder