Lucene search
+L

29 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2022-4160

Malicious code in bioql PyPI...

3.5CVSS5.4AI score0.00971EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2023/02/15 5:16 a.m.•13 views

SUSE CVE-2015-5240

Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, allows remote authenticated users to bypass IP anti-spoofing controls by changing the device owner of a port to start with network: before the security group...

3.5CVSS7.5AI score0.00971EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2023/02/15 4:25 a.m.•14 views

SUSE CVE-2018-14635

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS6.6AI score0.02527EPSS
SaveExploits0References3
OSV
OSV
•added 2022/05/17 3:52 a.m.•18 views

GHSA-HHPJ-6PJ7-WPX5 OpenStack Neutron Race condition vulnerability

Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, allows remote authenticated users to bypass IP anti-spoofing controls by changing the device owner of a port to start with network: before the security group...

3.5CVSS6.1AI score0.00971EPSS
SaveExploits0References12
Github Security Blog
Github Security Blog
•added 2022/05/17 3:52 a.m.•43 views

OpenStack Neutron Race condition vulnerability

Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, allows remote authenticated users to bypass IP anti-spoofing controls by changing the device owner of a port to start with network: before the security group...

3.5CVSS7AI score0.00971EPSS
SaveExploits0References12Affected Software1
Github Security Blog
Github Security Blog
•added 2022/05/13 1:07 a.m.•46 views

OpensStack Neutron Denial of Service Vulnerability

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS6.6AI score0.02527EPSS
SaveExploits0References11Affected Software1
OSV
OSV
•added 2022/05/13 1:07 a.m.•81 views

GHSA-X634-34M9-96MP OpensStack Neutron Denial of Service Vulnerability

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

7.1CVSS6.1AI score0.02527EPSS
SaveExploits0References11
RedhatCVE
RedhatCVE
•added 2019/10/05 3:31 p.m.•34 views

CVE-2018-14635

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS4.1AI score0.02527EPSS
SaveExploits0References1
Veracode
Veracode
•added 2019/01/15 9:07 a.m.•32 views

Anti-Spoofing Controls Bypass

openstack-neutron is vulnerable to anti-spoofing controls bypass. Authenticated users using the ML2 plugin or the security groups AMQP API are able to set the deviceowner field to an arbitrary value starting with network: on networks they do not own. Setting the affected field before the security...

3.5CVSS6.1AI score0.00971EPSS
SaveExploits0References11Affected Software1
Veracode
Veracode
•added 2018/09/25 2:54 a.m.•38 views

Anti-Spoofing Controls Bypass

openstack-neutron is vulnerable to anti-spoofing controls bypass. Authenticated users using the ML2 plugin or the security groups AMQP API are able to set the deviceowner field to an arbitrary value starting with network: on networks they do not own. Setting the affected field before the security...

3.5CVSS6.1AI score0.00971EPSS
SaveExploits0References8Affected Software1
RedHat Linux
RedHat Linux
•added 2018/09/17 4:47 p.m.•31 views

openstack-neutron: A router interface out of subnet IP range results in a denial of service

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS5.8AI score0.02527EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2018/09/10 7:29 p.m.•35 views

CVE-2018-14635

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS6.6AI score0.02527EPSS
SaveExploits0References1
Prion
Prion
•added 2018/09/10 7:29 p.m.•32 views

Design/Logic Flaw

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

4CVSS6.3AI score0.02527EPSS
SaveExploits0References7Affected Software2
OSV
OSV
•added 2018/09/10 7:29 p.m.•43 views

CVE-2018-14635

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS6.3AI score
SaveExploits0References7
OSV
OSV
•added 2018/09/10 7:29 p.m.•27 views

DEBIAN-CVE-2018-14635

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS6.6AI score0.02527EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/09/10 7:00 p.m.•67 views

CVE-2018-14635

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS6.2AI score0.02527EPSS
SaveExploits0References7
CVE
CVE
•added 2018/09/10 7:00 p.m.•121 views

CVE-2018-14635

The CVE-2018-14635 vulnerability affects OpenStack Neutron’s ml2 Linux Bridge driver. The issue allows non-privileged tenants to create and attach ports without assigning an IP address, bypassing IP address validation. This can lead to a potential denial of service if an IP outside the allowed al...

6.5CVSS6.1AI score0.02527EPSS
SaveExploits0References7Affected Software1
Mend
Mend
•added 2018/09/10 7:00 p.m.•6 views

CVE-2018-14635

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

7.1CVSS0.02527EPSS
SaveExploits0References13
Debian CVE
Debian CVE
•added 2018/09/10 7:00 p.m.•84 views

CVE-2018-14635

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS6.3AI score0.02527EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/10 12:00 a.m.•7 views

CVE-2018-14635: Improper Input Validation

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS6.5AI score0.02527EPSS
SaveExploits0References3
Rows per page
Query Builder