Redhat

Openstack

214 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2019-11287

Exploit
  • EPSS 0.79%
  • Published 23.11.2019 00:15:10
  • Last modified 02.04.2025 14:13:43

Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is vulnerable to a denial of servi...

4.8

CVE-2019-11291

  • EPSS 0.48%
  • Published 22.11.2019 23:15:11
  • Last modified 02.04.2025 14:13:43

Pivotal RabbitMQ, 3.7 versions prior to v3.7.20 and 3.8 version prior to v3.8.1, and RabbitMQ for PCF, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain two endpoints, federation and shovel, which do not properly sanitize u...

7.5

CVE-2019-14818

  • EPSS 1.14%
  • Published 14.11.2019 17:15:14
  • Last modified 21.11.2024 04:27:25

A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM me...

6.5

CVE-2013-6460

Exploit
  • EPSS 2.52%
  • Published 05.11.2019 15:15:11
  • Last modified 21.11.2024 01:59:16

Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents

6.5

CVE-2013-6461

Exploit
  • EPSS 2.05%
  • Published 05.11.2019 15:15:11
  • Last modified 21.11.2024 01:59:16

Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits

5.9

CVE-2013-2255

  • EPSS 0.41%
  • Published 01.11.2019 19:15:10
  • Last modified 21.11.2024 01:51:20

HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates.

4.8

CVE-2019-11281

  • EPSS 1.02%
  • Published 16.10.2019 16:15:10
  • Last modified 21.11.2024 04:20:50

Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain two components, the virtual host limits page, and the federation manage...

7.8

CVE-2019-14846

  • EPSS 0.14%
  • Published 08.10.2019 19:15:10
  • Last modified 21.11.2024 04:27:29

In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBU...

6.1

CVE-2017-18635

Exploit
  • EPSS 7.25%
  • Published 25.09.2019 23:15:09
  • Last modified 21.11.2024 03:20:32

An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.

7.8

CVE-2019-9514

  • EPSS 9.48%
  • Published 13.08.2019 21:15:12
  • Last modified 14.01.2025 19:29:55

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the p...