Skip to contentOpenstack vulnerabilities
Newest
- openstack essex, folsom, image registry and delivery service \(glance\) +2 moreOpenStack Glance arbitrary deletion of non-protected imagesCVE-2012-5482Fix available5.5 Medium
- openstack essex, folsom, image registry and delivery service \(glance\) +2 moreOpenStack Glance arbitrary deletion of non-protected imagesCVE-2012-4573Fix available5.5 Medium
- openstack swift, redhat storage, fedoraproject fedora +4 more +6 moreOpenStack Object Storage (swift) Code Injection vulnerabilityCVE-2012-4406Fix available9.8 Critical
- openstack keystoneOpenStack Keystone Token authorization for a user in a disabled tenant is allowedCVE-2012-4457Fix available4.0 Medium
- openstack keystoneOpenStack Keystone Improper Authentication vulnerabilityCVE-2012-4456Fix available7.5 High
- openstack keystoneOpenStack Keystone does not invalidate existing tokens when granting or revoking rolesCVE-2012-4413Fix available4.0 Medium
- openstack essex, horizon +1 moreOpenStack Keystone Allows Remote User Account CreationCVE-2012-3542Fix available4.3 Medium
- openstack horizonOpen redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1...CVE-2012-3540Fix available5.8 Medium
- openstack folsom, nova +1 moreArbitrary file overwrite in OpenStack NovaCVE-2012-3447Fix available4.9 Medium
- openstack novaOpenStack Nova Long server names grow nova-api log files significantlyCVE-2012-1585Fix available4.0 Medium
- openstack essex, keystone, horizon +2 moreOpenStack Keystone token expiration issuesCVE-2012-3426Fix available4.9 Medium
- openstack diablo, essex, folsom +2 moreOpenStack Nova Arbitrary file injection/corruption through directory traversal issuesCVE-2012-3361Fix available5.5 Medium
- openstack essex, folsom +1 moreOpenStack Nova Directory traversal vulnerabilityCVE-2012-3360Fix available5.5 Medium
- openstack compute, essex, folsom +2 moreOpenStack Nova Scheduler denial of service through scheduler_hintsCVE-2012-3371Fix available3.5 Low
- openstack compute, diablo, essex +2 moreOpenStack Compute (Nova) Improper Input ValidationCVE-2012-2654Fix available4.3 Medium
- openstack novaOpenstack Compute (Nova) Denial of service via network request that triggers large number of iptables rulesCVE-2012-2101Fix available3.5 Low
- openstack horizonOpenStack Horizon Session FixationCVE-2012-2144Fix available6.8 Medium
- openstack horizonOpenStack Horizon Cross-site scripting (XSS) vulnerabilityCVE-2012-2094Fix available4.3 Medium
- openstack essex, nova +1 moreNova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass...CVE-2012-0030Fix available4.9 Medium
- openstack novaOpenStack Nova Multiple directory traversal vulnerabilitiesCVE-2011-4596Fix available6.0 Medium