Openstack Essex vulnerabilities

• openstack cinder folsom, folsom, grizzly +3 more +5 more XML Entity Expansion (XEE) in Django CVE-2013-1664 Fix available 5.0 MediumApril 3, 2013
• openstack essex, folsom, grizzly +1 more +3 more OpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp function CVE-2013-1838 Fix available 4.0 MediumMarch 22, 2013
• openstack essex, folsom, grizzly +6 more +8 more Openstack nova: vnc proxy can connect to the wrong vm CVE-2013-0335 Fix available 7.6 HighMarch 22, 2013
• openstack essex, folsom, red hat openstack folsom for rhel 6 +2 more +4 more Puppetlabs-cinder: packstack: openstack: puppetlabs-cinder: information disclosure of openstack administrative passwords due to world-readable configuration files. CVE-2013-0266 5.5 MediumMarch 8, 2013
• openstack essex, folsom, red hat openstack folsom for rhel 6 +2 more +4 more Packstack: packstack: arbitrary file overwrite via symlink attack CVE-2013-0261 8.8 HighMarch 8, 2013
• openstack folsom, keystone essex +1 more XML External Entity (XXE) in Django CVE-2013-1665 Fix available 5.0 MediumFebruary 27, 2013
• openstack essex, folsom, canonical ubuntu linux +2 more The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova... CVE-2013-0208 Fix available 6.5 MediumFebruary 13, 2013
• openstack essex, folsom, red hat openstack essex for rhel 6 +5 more +7 more Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling CVE-2012-5571 Fix available 5.4 MediumDecember 18, 2012
• openstack essex, folsom, image registry and delivery service \(glance\) +2 more OpenStack Glance arbitrary deletion of non-protected images CVE-2012-5482 Fix available 5.5 MediumNovember 11, 2012
• openstack essex, folsom, image registry and delivery service \(glance\) +2 more OpenStack Glance arbitrary deletion of non-protected images CVE-2012-4573 Fix available 5.5 MediumNovember 11, 2012
• openstack essex, horizon +1 more OpenStack Keystone Allows Remote User Account Creation CVE-2012-3542 Fix available 4.3 MediumSeptember 5, 2012
• openstack essex, keystone, horizon +2 more OpenStack Keystone token expiration issues CVE-2012-3426 Fix available 4.9 MediumJuly 31, 2012
• openstack diablo, essex, folsom +2 more OpenStack Nova Arbitrary file injection/corruption through directory traversal issues CVE-2012-3361 Fix available 5.5 MediumJuly 22, 2012
• openstack essex, folsom +1 more OpenStack Nova Directory traversal vulnerability CVE-2012-3360 Fix available 5.5 MediumJuly 22, 2012
• openstack compute, essex, folsom +2 more OpenStack Nova Scheduler denial of service through scheduler_hints CVE-2012-3371 Fix available 3.5 LowJuly 17, 2012
• openstack compute, diablo, essex +2 more OpenStack Compute (Nova) Improper Input Validation CVE-2012-2654 Fix available 4.3 MediumJune 21, 2012
• openstack essex, nova +1 more Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass... CVE-2012-0030 Fix available 4.9 MediumJanuary 13, 2012