X.Org xdm 1.1.10, 1.1.11, and possibly other versions, when performing authentication using certain implementations of the crypt API function that can return NULL, allows remote attackers to cause a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.
Denial Of Service
X Display Manager
NVD
CVSS 2.0
4.3
EPSS
0.8%
keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity.
Privilege Escalation
Compute
Folsom
Grizzly
Havana
NVD
CVSS 2.0
2.1
EPSS
0.0%