The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a. Rated low severity (CVSS 3.6), this vulnerability is low attack complexity. No vendor patch available.
Red Hat
Information Disclosure
Kexec Tools
NVD
CVSS 2.0
3.6
EPSS
0.0%
Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the metadata to a (1) Glance. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. No vendor patch available.
XSS
Horizon
Solaris
NVD
CVSS 2.0
3.5
EPSS
0.4%