openstack-nova: network security group changes are not applied to running instances

A vulnerability was discovered in the way OpenStack Compute nova networking handled security group updates; changes were not applied to already running VM instances. A remote attacker could use this flaw to access running VM instances...

Moderate: Red Hat Security Advisory: openstack-nova security and bug fix advisory

Updated openstack-nova packages that fix one security issue and various bugs are now available for Red Hat Enterprise Linux OpenStack Platform 6.0. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives...

openstack-nova: network security group changes are not applied to running instances

A vulnerability was discovered in the way OpenStack Compute nova networking handled security group updates; changes were not applied to already running VM instances. A remote attacker could use this flaw to access running VM instances...

openstack-nova: network security group changes are not applied to running instances

A vulnerability was discovered in the way OpenStack Compute nova networking handled security group updates; changes were not applied to already running VM instances. A remote attacker could use this flaw to access running VM instances...

CVE-2015-0057

creationtimestamp| type| source ---|---|--- 2015-12-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39035 2016-04-05 19:41:29+00:00| published-proof-of-concept| https://t.me/informationsecuritychannel/954 2020-10-09 13:19:59+00:00| seen| MISP/fbff27c0-f30f-445c-92af-76781df1856d...

Buffer overflow

PCRE before 8.38 mishandles certain instances of the ?| substring, which allows remote attackers to cause a denial of service unintended recursion and buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object...

Error:"Cannot Connect to the vCenter Server due to a Certificate Error"

When adding a host connection to a vmware server the following error message is displayed: "Cannot connect to the vCenter server due to a certificate error. Make sure that the appropriate certificates are installed on the VCenter server, and install appropriate certificates on every controller in...

DEBIAN-CVE-2015-3280

OpenStack Compute nova before 2014.2.4 juno and 2015.1.x before 2015.1.2 kilo does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service disk consumption by deleting instances while in the resize state...

CVE-2015-3280

OpenStack Compute nova before 2014.2.4 juno and 2015.1.x before 2015.1.2 kilo does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service disk consumption by deleting instances while in the resize state...

CVE-2013-3993

creationtimestamp| type| source ---|---|--- 2015-10-15 22:49:07+00:00| seen| MISP/56201e1d-f4dc-4ddd-8049-4f2e950d210b 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:31:38+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971597 2025-02-14...

Amazon Web Services Inspector Application Security Scanner

Amazon answered many security and compliance prayers yesterday with the release of its Inspector tool. Inspector scans applications launched in Amazon Web Services instances, looking for issues on two fronts: compliance with certain regulations such as the Payment Card Industry Data Security...

Prevent Activity feed information leakage by allowing permanently disabling of it

It seems that the sensitive information leakage is something almost impossible to avoid when you have a pair of JIRA instances, internal and external, which are connected one to another. Having them connected is clearly a business requirement for being able to cross link issues and to copy them...

SAP Mobile Platform XXE injection

Few XXE injections...

CVE-2015-6834

creationtimestamp| type| source ---|---|--- 2015-09-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38120 2015-09-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38122 2025-07-18 22:39:10+00:00| seen| https://t.me/HackBlaz/29...

CVE-2012-1856

creationtimestamp| type| source ---|---|--- 2015-08-25 09:05:05+00:00| seen| MISP/55dc2f59-7238-468a-8956-575e950d210b 2016-02-08 10:35:40+00:00| seen| MISP/56b86d69-3b0c-465d-8eb3-0e57bce2ab96 2016-04-18 19:30:24+00:00| seen| MISP/57153590-f73c-49fa-be4b-4737950d210f 2017-03-23 16:13:41+00:00|...

CVE-2015-1671

creationtimestamp| type| source ---|---|--- 2015-08-15 21:24:52+00:00| seen| MISP/55cfaddf-5ea4-4215-8b3a-0ed00a00020f 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 13:36:55+00:00| seen| https://t.me/arpsyndicate/1218 2024-12-24 20:31:46+00:00| seen|...

某政府网上审批系统通用SQL注入7处打包

简要描述： 详细说明： 某政府网上审批系统通用SQL注入7处打包。 7处注入案例： http://.../workplate/base/org/WebUserList.aspx?id=99 http://.../workplate/base/org/WebUserList.aspx?id=99 http://.../workplate/base/org/WebUserList.aspx?id=99 http://.../workplate/base/org/WebUserList.aspx?id=99...

CUPS 2.0.3 - Multiple Vulnerabilities

Exploit for multiple platform in category remote exploits Source: http://googleprojectzero.blogspot.se/2015/06/owning-internet-printing-case-study-in.html Abstract Modern exploit mitigations draw attackers into a game of diminishing marginal returns. With each additional mitigation added, a subse...

CUPS 2.0.3 - Multiple Vulnerabilities

CUPS 2.0.3 - Multiple Vulnerabilities Source: http://googleprojectzero.blogspot.se/2015/06/owning-internet-printing-case-study-in.html Abstract Modern exploit mitigations draw attackers into a game of diminishing marginal returns. With each additional mitigation added, a subset of software bugs...

Debian DLA-239-1 : cups security update

Two critical vulnerabilities have been found in the CUPS printing system : CVE-2015-1158 - Improper Update of Reference Count Cupsd uses reference-counted strings with global scope. When parsing a print job request, cupsd over-decrements the reference count for a string from the request. As a...