6 matches found
CVE-2013-5123
The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.
CVE-2012-6135
RubyGems passenger 4.0.0 betas 1 and 2 allows remote attackers to delete arbitrary files during the startup process.
CVE-2013-0163
OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook which could facilitate DoS
CVE-2014-0175
mcollective has a default password set at install
CVE-2014-0163
Openshift has shell command injection flaws due to unsanitized data being passed into shell commands.
CVE-2013-2103
OpenShift cartridge allows remote URL retrieval