260711
|
- |
|
openstack
|
cinder_folsom compute_\(nova\)_essex compute_\(nova\)_folsom folsom grizzly keystone_essex
|
The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other pro…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2013-1664
|
2013-05-15 12:35 |
2013-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260712
|
- |
|
openstack
|
folsom keystone_essex
|
The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via a…
|
CWE-200
Information Exposure
|
CVE-2013-1665
|
2013-05-15 12:35 |
2013-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260713
|
- |
|
fedoraproject
|
sssd
|
The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which al…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-0287
|
2013-05-15 12:34 |
2013-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260714
|
- |
|
djangoproject canonical
|
django ubuntu_linux
|
The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated a…
|
CWE-200
Information Exposure
|
CVE-2013-0305
|
2013-05-15 12:34 |
2013-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260715
|
- |
|
djangoproject canonical
|
django ubuntu_linux
|
Per http://www.ubuntu.com/usn/usn-1757-1/
"A security issue affects these releases of Ubuntu and its derivatives:
Ubuntu 12.10
Ubuntu 12.04 LTS
Ubuntu 11.10
Ubuntu 10.04 LTS"
|
CWE-200
Information Exposure
|
CVE-2013-0305
|
2013-05-15 12:34 |
2013-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260716
|
- |
|
djangoproject canonical
|
django ubuntu_linux
|
The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of ser…
|
CWE-189
Numeric Errors
|
CVE-2013-0306
|
2013-05-15 12:34 |
2013-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260717
|
- |
|
apple
|
cups
|
The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cach…
|
CWE-59
Link Following
|
CVE-2010-2431
|
2013-05-15 12:10 |
2010-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260718
|
- |
|
apple
|
cups
|
The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a demand for authorization, which allows remote CUPS servers to c…
|
CWE-399
Resource Management Errors
|
CVE-2010-2432
|
2013-05-15 12:10 |
2010-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260719
|
- |
|
libtiff
|
libtiff
|
The OJPEGReadBufferFill function in tif_ojpeg.c in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an OJPEG image with u…
|
NVD-CWE-Other
|
CVE-2010-2443
|
2013-05-15 12:10 |
2010-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260720
|
- |
|
libtiff
|
libtiff
|
Per: http://cwe.mitre.org/data/definitions/476.html
'CWE-476: NULL Pointer Dereference'
|
NVD-CWE-Other
|
CVE-2010-2443
|
2013-05-15 12:10 |
2010-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|