Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Xen Component: Xapi Clear all filters
TI-2024-20524 CVE-2024-31144 · GHSA-fg38-pgj3-5w5f

Xapi: Metadata injection attack against backup/restore functionality

Priority LOW 17

For a brief summary of Xapi terminology, see: https://xapi-project.github.io/xen-api/overview.html#object-model-overview Xapi contains functionality to backup and restore metadata about Virtual Machines and Storage Repos…

CVSS 3.1LOW 3.8 Local Low privileges No interaction EPSS 0.00215 Published 2025-02-14 No fix listed CWE-829
TI-2022-14867 CVE-2022-33749 · GHSA-v88g-q782-jgp2

Resource allocation without limits in Xapi

Priority LOW 26

XAPI open file limit DoS It is possible for an unauthenticated client on the network to cause XAPI to hit its file-descriptor limit.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01175 Published 2022-10-11 No fix listed CWE-770