Lucene search
K

25 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-4160

Malicious code in bioql PyPI...

3.5CVSS7.5AI score0.00128EPSS
Exploits0References13
SUSE CVE
SUSE CVE
added 2023/02/15 5:16 a.m.1 views

SUSE CVE-2015-5240

Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, allows remote authenticated users to bypass IP anti-spoofing controls by changing the device owner of a port to start with network: before the security group...

3.5CVSS7.5AI score0.00128EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:25 a.m.3 views

SUSE CVE-2018-14635

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS6.6AI score0.00306EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/05/17 3:52 a.m.16 views

OpenStack Neutron Race condition vulnerability

Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, allows remote authenticated users to bypass IP anti-spoofing controls by changing the device owner of a port to start with network: before the security group...

3.5CVSS7AI score0.00128EPSS
Exploits0References12Affected Software1
OSV
OSV
added 2022/05/17 3:52 a.m.8 views

GHSA-HHPJ-6PJ7-WPX5 OpenStack Neutron Race condition vulnerability

Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, allows remote authenticated users to bypass IP anti-spoofing controls by changing the device owner of a port to start with network: before the security group...

3.5CVSS6.1AI score0.00128EPSS
Exploits0References12
Github Security Blog
Github Security Blog
added 2022/05/13 1:7 a.m.28 views

OpensStack Neutron Denial of Service Vulnerability

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS6.6AI score0.00306EPSS
Exploits0References11Affected Software1
OSV
OSV
added 2022/05/13 1:7 a.m.16 views

GHSA-X634-34M9-96MP OpensStack Neutron Denial of Service Vulnerability

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

7.1CVSS6.1AI score0.00306EPSS
Exploits0References11
RedhatCVE
RedhatCVE
added 2019/10/05 3:31 p.m.27 views

CVE-2018-14635

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS4.1AI score0.00306EPSS
Exploits0References1
Veracode
Veracode
added 2019/01/15 9:7 a.m.23 views

Anti-Spoofing Controls Bypass

openstack-neutron is vulnerable to anti-spoofing controls bypass. Authenticated users using the ML2 plugin or the security groups AMQP API are able to set the deviceowner field to an arbitrary value starting with network: on networks they do not own. Setting the affected field before the security...

3.5CVSS6.1AI score0.00128EPSS
Exploits0References11Affected Software1
Veracode
Veracode
added 2018/09/25 2:54 a.m.23 views

Anti-Spoofing Controls Bypass

openstack-neutron is vulnerable to anti-spoofing controls bypass. Authenticated users using the ML2 plugin or the security groups AMQP API are able to set the deviceowner field to an arbitrary value starting with network: on networks they do not own. Setting the affected field before the security...

3.5CVSS6.1AI score0.00128EPSS
Exploits0References8Affected Software1
RedHat Linux
RedHat Linux
added 2018/09/17 4:47 p.m.3 views

openstack-neutron: A router interface out of subnet IP range results in a denial of service

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS5.8AI score0.00306EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2018/09/10 7:29 p.m.21 views

CVE-2018-14635

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS6.6AI score0.00306EPSS
Exploits0References1
Prion
Prion
added 2018/09/10 7:29 p.m.19 views

Design/Logic Flaw

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

4CVSS6.3AI score0.00306EPSS
Exploits0References7Affected Software2
OSV
OSV
added 2018/09/10 7:29 p.m.17 views

CVE-2018-14635

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS6.3AI score0.00306EPSS
Exploits0References7
OSV
OSV
added 2018/09/10 7:29 p.m.2 views

DEBIAN-CVE-2018-14635

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS6.6AI score0.00306EPSS
Exploits0References1
CVE
CVE
added 2018/09/10 7:0 p.m.88 views

CVE-2018-14635

The CVE-2018-14635 vulnerability affects OpenStack Neutron’s ml2 Linux Bridge driver. The issue allows non-privileged tenants to create and attach ports without assigning an IP address, bypassing IP address validation. This can lead to a potential denial of service if an IP outside the allowed al...

6.5CVSS6.1AI score0.00306EPSS
Exploits0References7Affected Software1
Debian CVE
Debian CVE
added 2018/09/10 7:0 p.m.17 views

CVE-2018-14635

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS6.3AI score0.00306EPSS
Exploits0
Cvelist
Cvelist
added 2018/09/10 7:0 p.m.20 views

CVE-2018-14635

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS6.2AI score0.00306EPSS
Exploits0References7
Prion
Prion
added 2015/10/27 4:59 p.m.22 views

Race condition

Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, allows remote authenticated users to bypass IP anti-spoofing controls by changing the device owner of a port to start with network: before the security group...

3.5CVSS6.8AI score0.00128EPSS
Exploits0References5Affected Software1
UbuntuCve
UbuntuCve
added 2015/10/27 4:59 p.m.23 views

CVE-2015-5240

Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, allows remote authenticated users to bypass IP anti-spoofing controls by changing the device owner of a port to start with network: before the security group...

3.5CVSS7.1AI score0.00128EPSS
Exploits0References2
Rows per page
Query Builder