Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat openstack 13 vulnerabilities and exploits

(subscribe to this query)
4
CVSSv2
CVE-2019-14900
A flaw was found in Hibernate ORM in versions prior to 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an malic...
Hibernate Hibernate OrmRedhat Decision Manager 7.0Redhat Openstack 10Redhat Single Sign-on -Redhat Jboss Data Grid 7.0.0Redhat Jboss Middleware Text-only Advisories -Redhat Openstack 14Redhat Openstack 13Redhat Jboss Enterprise Application Platform -Redhat Build Of Quarkus -Redhat FuseQuarkus QuarkusRedhat Jboss Enterprise Application Platform 7.3Redhat Jboss Enterprise Application Platform 7.4Redhat Jboss Enterprise Application Platform 7.2
7.5
CVSSv2
CVE-2018-17963
qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows malicious users to cause a denial of service or possibly have unspecified other impact.
Qemu QemuQemu Qemu 3.1.0Debian Debian Linux 8.0Debian Debian Linux 9.0Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Redhat Openstack 10Redhat Openstack 13Redhat Openstack 14Redhat Virtualization 4.0Redhat Virtualization Manager 4.3
6.8
CVSSv2
CVE-2018-1000807
Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service or remote code execution.. This attack appear to be exploitab...
Pyopenssl PyopensslCanonical Ubuntu Linux 16.04Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Openstack 13
3.6
CVSSv2
CVE-2020-1735
A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
Redhat Cloudforms Management Engine 5.0Redhat Ansible TowerRedhat Openstack 13Redhat AnsibleDebian Debian Linux 10.0Fedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 32
4.3
CVSSv2
CVE-2017-18635
An XSS vulnerability exists in noVNC prior to 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.
Novnc NovncDebian Debian Linux 8.0Debian Debian Linux 9.0Canonical Ubuntu Linux 16.04Redhat Openstack 13
4.6
CVSSv2
CVE-2019-14905
A vulnerability was found in Ansible Engine versions 2.9.x prior to 2.9.3, 2.8.x prior to 2.8.8, 2.7.x prior to 2.7.16 and previous versions, where in Ansible's nxos_file_copy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craf...
Redhat Ansible EngineRedhat Cloudforms Management Engine 5.0Redhat Ceph Storage 3.0Redhat Ansible Tower 3.0.0Redhat Openstack 13Fedoraproject Fedora 30Opensuse Leap 15.1Opensuse Backports Sle 15.0
4.3
CVSSv2
CVE-2018-1000808
Python Cryptographic Authority pyopenssl version prior to 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service if memory runs low or is exhausted. This attack appear to be explo...
Pyopenssl Project PyopensslCanonical Ubuntu Linux 16.04Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Desktop 7.0Redhat Openstack 13Redhat Gluster Storage 3.0
3.3
CVSSv2
CVE-2020-1739
A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by read...
Redhat Ansible TowerRedhat AnsibleRedhat Cloudforms Management Engine 5.0Redhat Openstack 13Fedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 32Debian Debian Linux 8.0Debian Debian Linux 10.0
3.7
CVSSv2
CVE-2020-1733
A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is cr...
Redhat Cloudforms Management Engine 5.0Redhat Ansible TowerRedhat AnsibleRedhat Openstack 13Fedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 32Debian Debian Linux 8.0Debian Debian Linux 10.0
1.9
CVSSv2
CVE-2020-1740
A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file...
Redhat Cloudforms Management Engine 5.0Redhat Ansible TowerRedhat Openstack 13Redhat AnsibleDebian Debian Linux 8.0Debian Debian Linux 10.0Fedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 32
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook