Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

suse suse openstack cloud 7 vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv3
CVE-2020-8023
A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE Enterprise Storage 5, SUSE Linux Enterprise Debuginfo 11-SP3, SUSE Linux Enterprise Debuginfo 11-SP4, SUSE Linux Enterprise Point of Sale 11-SP3, SUSE Linux Enterpri...
Opensuse Openldap2
7.8
CVSSv3
CVE-2020-8022
A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Server 12-SP3-BCL, SUSE Linux Enterprise Server 12-SP3-LTSS, SUSE Linux ...
Apache TomcatOpensuse Leap 15.1
7.8
CVSSv3
CVE-2018-17954
An Improper Privilege Management in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9 allows root users on any crowbar managed node to cause become root on any other node. This issue a...
Suse Openstack Cloud 8.0Suse Openstack Cloud Crowbar 8.0Suse Openstack Cloud Crowbar 9.0Suse Openstack Cloud 9.0Suse Openstack Cloud 7.0
7.5
CVSSv3
CVE-2018-12116
Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized user-provided Unicode data for the `path` option of an HTTP request, then data can be provided which will trigger a second, unexpected, and user-define...
Nodejs Node.jsSuse Suse Linux Enterprise Server 12Suse Suse Enterprise Storage 4Suse Suse Openstack Cloud 7Suse Suse Openstack Cloud 8Suse Suse Linux Enterprise Server 15
7.5
CVSSv3
CVE-2018-12122
Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers very slowly keeping HTTP or HTTPS connections and associated resources alive for a long period of time.
Nodejs Node.jsSuse Suse Linux Enterprise Server 12Suse Suse Enterprise Storage 4Suse Suse Openstack Cloud 7Suse Suse Openstack Cloud 8Suse Suse Linux Enterprise Server 15
5.3
CVSSv3
CVE-2017-13079
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.
Debian Debian Linux 9.0Debian Debian Linux 8.0Canonical Ubuntu Linux 14.04Redhat Enterprise Linux Server 7Freebsd Freebsd 10Freebsd Freebsd 10.4Opensuse Leap 42.2Canonical Ubuntu Linux 17.04Canonical Ubuntu Linux 16.04Freebsd Freebsd 11Freebsd Freebsd 11.1Redhat Enterprise Linux Desktop 7Freebsd FreebsdOpensuse Leap 42.3W1.fi Hostapd 2.4W1.fi Hostapd 2.3W1.fi Hostapd 0.6.10W1.fi Hostapd 0.6.9W1.fi Hostapd 0.4.11W1.fi Hostapd 0.4.10W1.fi Hostapd 0.4.9W1.fi Hostapd 0.2.8
5.3
CVSSv3
CVE-2017-13081
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.
Debian Debian Linux 8.0Freebsd Freebsd 11Redhat Enterprise Linux Server 7Redhat Enterprise Linux Desktop 7Freebsd Freebsd 10.4Canonical Ubuntu Linux 17.04Opensuse Leap 42.2Debian Debian Linux 9.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Freebsd Freebsd 11.1Freebsd Freebsd 10Freebsd FreebsdOpensuse Leap 42.3W1.fi Hostapd 2.4W1.fi Hostapd 2.3W1.fi Hostapd 0.6.9W1.fi Hostapd 0.6.8W1.fi Hostapd 0.4.10W1.fi Hostapd 0.4.9W1.fi Hostapd 0.2.8W1.fi Hostapd 0.2.6
6.8
CVSSv3
CVE-2017-13084
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
Freebsd Freebsd 11Freebsd Freebsd 11.1Redhat Enterprise Linux Desktop 7Freebsd FreebsdCanonical Ubuntu Linux 17.04Canonical Ubuntu Linux 16.04Freebsd Freebsd 10Freebsd Freebsd 10.4Opensuse Leap 42.3Opensuse Leap 42.2Debian Debian Linux 9.0Debian Debian Linux 8.0Canonical Ubuntu Linux 14.04Redhat Enterprise Linux Server 7W1.fi Hostapd 2.3W1.fi Hostapd 2.2W1.fi Hostapd 0.6.9W1.fi Hostapd 0.6.8W1.fi Hostapd 0.4.10W1.fi Hostapd 0.4.9W1.fi Hostapd 0.4.8W1.fi Hostapd 0.2.6
4.3
CVSSv3
CVE-2015-7976
The ntpq saveconfig command in NTP 4.1.2, 4.2.x prior to 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows malicious users to cause unspecified impact via a crafted filename.
Ntp Ntp 4.1.2Ntp NtpNtp Ntp 4.3.0Ntp Ntp 4.3.1Ntp Ntp 4.3.16Ntp Ntp 4.3.17Ntp Ntp 4.3.24Ntp Ntp 4.3.25Ntp Ntp 4.3.31Ntp Ntp 4.3.32Ntp Ntp 4.3.39Ntp Ntp 4.3.4Ntp Ntp 4.3.47Ntp Ntp 4.3.48Ntp Ntp 4.3.54Ntp Ntp 4.3.55Ntp Ntp 4.3.61Ntp Ntp 4.3.62Ntp Ntp 4.3.63Ntp Ntp 4.3.7Ntp Ntp 4.3.70Ntp Ntp 4.3.77
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook