Security advisories

medium2022-05-14

CVE-2012-4457-OpenStack Keystone Token authorization for a user in a disabled tenant is allowed

View chart →

openstack/keystone · GHSA-x8h4-xf47-pqc3

high2022-05-14

CVE-2012-4456-OpenStack Keystone Improper Authentication vulnerability

View chart →

openstack/keystone · GHSA-mf98-r2gf-2x3w

medium2022-05-14

CVE-2018-16831-Smarty Path Traversal Vulnerability

View chart →

smarty-php/smarty · GHSA-65j5-vpm7-6xp4

medium2022-05-14

CVE-2013-4202-OpenStack Cinder Denial of Service using XML entities

View chart →

openstack/cinder · GHSA-mfg4-9xf4-f45q

medium2022-05-14

CVE-2013-6437-OpenStack Nova DoS through ephemeral disk backing files

View chart →

openstack/nova · GHSA-hrv9-4x4c-9jc8

low2022-05-14

CVE-2013-7048-OpenStack Nova live snapshots use an insecure local directory

View chart →

openstack/nova · GHSA-grp5-h379-j75x

medium2022-05-14

CVE-2015-8749- OpenStack Nova Potential Xen connection password leak via StorageError

View chart →

openstack/nova · GHSA-c36r-g737-9qp8

medium2022-05-14

CVE-2015-3241-OpenStack Nova instance migration process does not stop when instance is deleted

View chart →

openstack/nova · GHSA-3vx7-xff6-h2vx

low2022-05-14

CVE-2014-7231-OpenStack Oslo utility sensitive information exposure via log files

View chart →

openstack/oslo.utils · GHSA-v933-vx5p-j7w2

medium2022-05-14

CVE-2016-2140-OpenStack Nova host data access through resize/migration

View chart →

openstack/nova · GHSA-49jv-37hm-6gfp

medium2022-05-14

CVE-2018-17876-Coaster CMS Stored Cross-site Scripting vulnerability

View chart →

coastercms/coastercms · GHSA-77cq-wgpf-g449

critical2022-05-14

CVE-2018-17566-ThinkPHP SQL injection vulnerability

View chart →

top-think/framework · GHSA-75fm-52mm-q5rm

high2022-05-14

CVE-2018-17102-QuickAppsCMS Cross-Site Request Forgery (CSRF)

View chart →

quickapps/cms · GHSA-3p9v-xp6w-wcmc

medium2022-05-14

CVE-2015-5169-Cross-site Scripting in Apache Struts

View chart →

apache/struts · GHSA-vwhv-j36g-5rm8

high2022-05-14

CVE-2013-2134-Arbitrary code execution in Apache Struts 2

View chart →

apache/struts · GHSA-gqqm-564f-vvxq

high2022-05-14

CVE-2013-2135-Arbitrary code execution in Apache Struts 2

View chart →

apache/struts · GHSA-pw8r-x2qm-3h5m

medium2022-05-14

CVE-2016-4003-Cross-site Scripting in Apache Struts

View chart →

apache/struts · GHSA-m3x6-9v6h-4g28

medium2022-05-14

CVE-2018-13258-Mediawiki tarball is missing .htaccess files

View chart →

wikimedia/mediawiki · GHSA-2c28-7gwv-cpgf

medium2022-05-14

CVE-2018-16982-Open Chinese Convert subject to Denial of Service via Out-of-bounds Read

View chart →

byvoid/opencc · GHSA-9qh2-6fxg-9m4g

medium2022-05-14

CVE-2013-1939-SabreDAV Directory Traversal vulnerability

View chart →

sabre-io/dav · GHSA-qg5v-jw6f-rpfj