Lucene search
K

7816 matches found

CVE
CVE
added 2022/03/23 7:46 p.m.151 views

CVE-2021-4180

The CVE affects openstack-tripleo-heat-templates (older than 11.6.1). The underlying issue is an information exposure: an external user can discover internal IP addresses or hostnames by inspecting the www_authenticate_uri parameter in configuration files. This data leakage is specifically tied t...

4.3CVSS4AI score0.00754EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2022/03/23 7:46 p.m.49 views

CVE-2021-4180

An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the wwwauthenticateuri parameter which is visible to all end users in configuration files. This would give sensitive...

4.5AI score0.00754EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/03/23 12:0 a.m.4 views

openstack-tripleo-heat-templates 信息泄露漏洞

openstack-tripleo-heat-templates is a set of templates and tools for building Heat templates for OpenStack deployment. A security vulnerability exists in openstack-tripleo-heat-templates that stems from the fact that an attacker can exploit this by checking the wwwauthenticateuri parameter visibl...

4.3CVSS5.1AI score0.00754EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2022/03/22 12:0 a.m.18 views

SUSE: Security Advisory (SUSE-SU-2022:0910-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.7CVSS6AI score0.00483EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2022/03/16 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2022:0871-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.3AI score0.08346EPSS
Exploits0References19
OpenVAS
OpenVAS
added 2022/03/16 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2022:0860-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.70561EPSS
Exploits2References8
OpenVAS
OpenVAS
added 2022/03/12 12:0 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2022:0811-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.6AI score0.16342EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2022/03/10 12:0 a.m.30 views

SUSE: Security Advisory (SUSE-SU-2022:0782-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.1AI score0.00645EPSS
Exploits8References7
OpenVAS
OpenVAS
added 2022/03/10 12:0 a.m.14 views

SUSE: Security Advisory (SUSE-SU-2022:0777-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS8.7AI score0.14261EPSS
Exploits2References6
OpenVAS
OpenVAS
added 2022/03/09 12:0 a.m.14 views

SUSE: Security Advisory (SUSE-SU-2022:0762-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.7AI score0.05528EPSS
Exploits13References17
OpenVAS
OpenVAS
added 2022/03/05 12:0 a.m.18 views

SUSE: Security Advisory (SUSE-SU-2022:0733-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS9AI score0.0198EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2022/03/05 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2022:0734-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.0142EPSS
Exploits0References2
OSV
OSV
added 2022/03/04 12:0 a.m.28 views

GHSA-VQP6-J452-J6WP Open Redirect in CPython that affects users of OpenStack Nova

A vulnerability was found in CPython which is used by openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL...

6.1CVSS6.1AI score0.27459EPSS
Exploits1References10
Github Security Blog
Github Security Blog
added 2022/03/04 12:0 a.m.29 views

Open Redirect in CPython that affects users of OpenStack Nova

A vulnerability was found in CPython which is used by openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL...

6.1CVSS6.4AI score0.27459EPSS
Exploits1References10Affected Software1
NVD
NVD
added 2022/03/02 11:15 p.m.20 views

CVE-2021-3654

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL...

6.1CVSS0.27459EPSS
Exploits1References8
OSV
OSV
added 2022/03/02 11:15 p.m.1 views

DEBIAN-CVE-2021-3654

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL...

6.1CVSS6.8AI score0.27459EPSS
Exploits1References1
OSV
OSV
added 2022/03/02 11:15 p.m.23 views

CVE-2021-3654

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL...

6.1CVSS6.1AI score
Exploits0References8
Prion
Prion
added 2022/03/02 11:15 p.m.20 views

Design/Logic Flaw

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL...

4CVSS6AI score0.27459EPSS
Exploits1References8Affected Software2
UbuntuCve
UbuntuCve
added 2022/03/02 11:15 p.m.57 views

CVE-2021-3654

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL...

6.1CVSS6.8AI score0.27459EPSS
Exploits1References3
OSV
OSV
added 2022/03/02 11:15 p.m.1 views

UBUNTU-CVE-2021-3654

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL...

6.1CVSS6.8AI score0.27459EPSS
Exploits1References4
Rows per page
Query Builder