Lucene search
+L

164 matches found

Openbugbounty
Openbugbounty
added 2022/08/08 10:50 a.m.15 views

oslo-bysteinerskole.no Cross Site Scripting vulnerability OBB-2830601

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OpenVAS
OpenVAS
added 2022/05/20 12:0 a.m.14 views

Mageia: Security Advisory (MGASA-2022-0189)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.9CVSS5.5AI score0.01335EPSS
SaveExploits1References4
Mageia
Mageia
added 2022/05/19 7:56 a.m.43 views

Updated python-oslo-utils packages fix security vulnerability

oslo.utils could be made to expose sensitive information if it received a specially crafted input CVE-2022-0718...

4.9CVSS2.6AI score0.01335EPSS
SaveExploits1References2
OSV
OSV
added 2022/05/19 7:56 a.m.10 views

MGASA-2022-0189 Updated python-oslo-utils packages fix security vulnerability

oslo.utils could be made to expose sensitive information if it received a specially crafted input CVE-2022-0718...

4.9CVSS4.7AI score0.01335EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2022/05/14 1:58 a.m.27 views

OpenStack Oslo utility sensitive information exposure via log files

The strutils.maskpassword function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log...

2.1CVSS6.7AI score0.00528EPSS
SaveExploits1References7Affected Software1
OSV
OSV
added 2022/05/14 1:58 a.m.12 views

GHSA-V933-VX5P-J7W2 OpenStack Oslo utility sensitive information exposure via log files

The strutils.maskpassword function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log...

2.1CVSS5.8AI score0.00528EPSS
SaveExploits1References7
Veracode
Veracode
added 2022/04/16 4:35 p.m.28 views

Information Disclosure

python-oslo-utils is vulnerable to information disclosure. The vulnerability exists because improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...

4.9CVSS2.4AI score0.01335EPSS
SaveExploits1References9Affected Software3
OSV
OSV
added 2022/04/07 1:30 p.m.3 views

USN-5369-1 python-oslo.utils vulnerability

It was discovered that oslo.utils incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information...

4.9CVSS7.1AI score0.01335EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2022/04/07 12:0 a.m.30 views

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : oslo.utils vulnerability (USN-5369-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5369-1 advisory. It was discovered that oslo.utils incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive...

4.9CVSS5.9AI score0.01335EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2022/03/24 12:0 a.m.58 views

RHEL 8 : Red Hat OpenStack Platform 16.2 (python-oslo-utils) (RHSA-2022:0993)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0993 advisory. The OpenStack Oslo Utility library. Security Fixes: incorrect password masking in debug output CVE-2022-0718 For more details about the security...

4.9CVSS5.9AI score0.01335EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2022/03/23 10:12 p.m.25 views

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-oslo-utils) security update

An update for python-oslo-utils is now available for Red Hat OpenStack Platform 16.2 Train. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

4.9CVSS6.1AI score0.01335EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2022/03/23 10:12 p.m.6 views

python-oslo-utils: incorrect password masking in debug output

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...

4.9CVSS5.7AI score0.01335EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2022/03/23 12:0 a.m.5 views

PT-2022-13384 · Openstack +4 · Python-Oslo-Utils +4

Name of the Vulnerable Software and Affected Versions: python-oslo-utils affected versions not specified Description: A flaw was found in python-oslo-utils due to improper parsing. Passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password afte...

6.9CVSS7AI score0.01335EPSS
SaveExploits1References35
UbuntuCve
UbuntuCve
added 2022/03/23 12:0 a.m.28 views

CVE-2022-0718

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...

4.9CVSS6.2AI score0.01335EPSS
SaveExploits1References3
OSV
OSV
added 2022/03/23 12:0 a.m.3 views

UBUNTU-CVE-2022-0718

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...

4.9CVSS7AI score0.01335EPSS
SaveExploits1References4
Openbugbounty
Openbugbounty
added 2022/03/21 8:8 a.m.9 views

oslokiropraktikk.no Improper Access Control vulnerability OBB-2438691

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

0.1AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2022/02/22 8:27 a.m.32 views

CVE-2022-0718

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...

6CVSS3AI score0.01335EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/02/21 12:0 a.m.8 views

Python-Oslo-Utils 日志信息泄露漏洞

Python-Oslo-Utils is a library from the OpenStack community. It is used to provide support for common utility type functions such as encoding, exception handling, string manipulation and time handling. A security vulnerability exists in Python-Oslo-Utils. No information about this vulnerability i...

4.9CVSS5.8AI score0.01335EPSS
SaveExploits1References16
Openbugbounty
Openbugbounty
added 2020/06/11 3:35 p.m.14 views

oslo.skischoolshop.com Cross Site Scripting vulnerability OBB-1192958

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/04/20 5:0 a.m.6 views

indianembassyoslo.gov.in Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1147500 Security Researcher D3F4ULT Helped patch 10 vulnerabilities Received 0 Coordinated Disclosure badges Received 2 recommendations , found a security vulnerability affecting indianembassyoslo.gov.in website and its users. Following coordinated and responsible...

0.1AI score
SaveExploits0
Rows per page
Query Builder