The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a. Rated low severity (CVSS 3.6), this vulnerability is low attack complexity. No vendor patch available.
Information Disclosure
Red Hat
Kexec Tools
NVD
CVSS 2.0
3.6
EPSS
0.0%
Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the metadata to a (1) Glance. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. No vendor patch available.
XSS
Oracle
Solaris
Openstack
Horizon
NVD
CVSS 2.0
3.5
EPSS
0.4%