Skip to contentOpenstack vulnerabilities
Newest
- openstack keystoneOpenStack Identity Keystone Improper Privilege ManagementCVE-2014-0204Fix available6.5 Medium
- openstack horizonCross-site scripting (XSS) vulnerability in the Groups panel in OpenStack Dashboard (Horizon)...CVE-2014-8578Fix available3.5 Low
- openstack nova, redhat openstack +1 moreOpenStack Nova VMware instance leak potentially leading to compute DoSCVE-2014-8333Fix available4.0 Medium
- openstack nova, redhat openstack +1 moreOpenStack Compute (Nova) Denial of Service vulnerabilityCVE-2014-3708Fix available4.0 Medium
- openstack swiftOpenStack Swift metadata constraints are not correctly enforcedCVE-2014-7960Fix available4.0 Medium
- openstack novaRace condition in the VMware driver in OpenStack Compute (Nova) before 2014.1.4 and 2014.2 before...CVE-2014-8750Fix available6.5 Medium
- openstack cinder, nova, trove +1 more +3 moreOpenStack Oslo utility sensitive information exposure via log filesCVE-2014-7231Fix available2.1 Low
- openstack cinder, nova, trove +2 more +4 moreThe processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before...CVE-2014-7230Fix available2.1 Low
- openstack cinderOpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerabilityCVE-2014-3641Fix available4.0 Medium
- openstack neutronThe default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014...CVE-2014-3632Fix available7.6 High
- openstack novaOpenStack Compute (Nova)'s VMWare driver vulnerable to denial of serviceCVE-2014-3608Fix available2.7 Low
- openstack keystonemiddleware, python-keystoneclient +1 moreOpenStack keystonemiddleware does not verify certificateCVE-2014-7144Fix available4.3 Medium
- openstack neutron, canonical ubuntu linux +1 moreOpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to...CVE-2014-6414Fix available4.0 Medium
- openstack keystone, redhat openstack, canonical ubuntu linux +2 moreOpenStack Identity Keystone Exposure of Sensitive InformationCVE-2014-3621Fix available4.0 Medium
- openstack horizon, fedoraproject fedora, opensuse +1 more +3 moreOpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly...CVE-2014-8124Fix available5.0 Medium
- canonical ubuntu linux, openstack image registry and delivery service \(glance\) +1 moreOpenStack Glance improper validation of the image_size_cap configuration optionCVE-2014-5356Fix available4.0 Medium
- openstack horizon, opensuse +1 moreOpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interfaceCVE-2014-3594Fix available3.5 Low
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Keystone Domain-scoped tokens don't get revokedCVE-2014-5253Fix available4.9 Medium
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Identity (Keystone) UUID v2 tokens does not expire with revocation eventsCVE-2014-5252Fix available4.9 Medium
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Identity (Keystone) Multiple vulnerabilities in revocation eventsCVE-2014-5251Fix available4.9 Medium
- openstack novaOpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerabilityCVE-2014-3517Fix available4.3 Medium
- openstack neutronOpenStack Neutron allows remote authenticated users to cause a denial of serviceCVE-2014-3555Fix available4.0 Medium
- openstack horizon, opensuse +1 moreCross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard...CVE-2014-3475Fix available3.5 Low
- openstack horizon, opensuse +1 moreOpenStack Horizon Cross-site scripting (XSS) vulnerabilityCVE-2014-3474Fix available3.5 Low
- openstack horizon, opensuse +1 moreHorizon-Orchestration Cross-site scripting (XSS) vulnerability through resource nameCVE-2014-3473Fix available4.3 Medium
- openstack keystoneOpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2...CVE-2014-3520Fix available6.5 Medium
- openstack neutron, oslo, pycadf +3 more +5 moreThe notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2...CVE-2014-4615Fix available5.0 Medium
- openstack swiftOpenStack Swift Cross-site Scriping vulnerabilityCVE-2014-3497Fix available4.3 Medium
- openstack neutron, canonical ubuntu linux +1 moreThe L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2...CVE-2014-4167Fix available3.5 Low
- openstack keystone, suse cloud +1 moreOpenStack Identity Keystone is vulnerable to Block delegation escalation of privilegeCVE-2014-3476Fix available6.0 Medium
- openstack keystone, fedoraproject fedora +1 moreOpenStack Identity (Keystone) Denial of ServiceCVE-2013-2014Fix available5.0 Medium
- openstack neutron, canonical ubuntu linux +1 moreThe default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not...CVE-2013-6433Fix available7.6 High
- openstack heatOpenStack Heat template URL information leakageCVE-2014-3801Fix available3.5 Low
- openstack horizonThe Identity v3 API in OpenStack Dashboard (Horizon) before 2013.2 does not require the current...CVE-2013-4471Fix available5.5 Medium
- openstack computeOpenStack Nova host data leak to vm instance in rescue modeCVE-2014-0134Fix available3.5 Low
- openstack neutron, canonical ubuntu linux, opensuse +2 moreThe openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014...CVE-2014-0187Fix available9.0 High
- openstack icehouse, image registry and delivery service \(glance\) +1 moreOpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerabilityCVE-2014-0162Fix available6.0 Medium
- openstack keystoneOpenStack Identity (Keystone) DoS through V3 API authentication chainingCVE-2014-2828Fix available7.8 High
- openstack python-keystoneclientpython-keystoneclient vulnerable to context confusion in Keystone auth_token middlewareCVE-2014-0105Fix available6.0 Medium
- openstack compute, icehouse +1 moreOpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requestsCVE-2014-0167Fix available6.0 Medium
- openstack horizon, opensuse +1 moreOpenStack Dashboard (aka Horizon) vulnerable to Cross-site ScriptingCVE-2014-0157Fix available4.3 Medium
- openstack keystoneOpenStack Identity (Keystone) Trustee token revocations does not work with memcache backendCVE-2014-2237Fix available5.0 Medium
- openstack neutron, canonical ubuntu linux +1 moreOpenStack Neutron Improper Authentication vulnerabilityCVE-2014-0056Fix available2.1 Low
- openstack computeOpenStack Nova VMWare driver leaks rescued imagesCVE-2014-2573Fix available2.3 Low
- openstack novaOpenStack Nova DoS through ephemeral disk backing filesCVE-2013-6437Fix available4.0 Medium
- openstack swiftPython Swift client is vulnerable to Missing SSL Certificate CheckCVE-2013-6396Fix available5.8 Medium
- openstack image registry and delivery service \(glance\)OpenStack Glance sensitive information disclosure via logsCVE-2014-1948Fix available2.6 Low
- openstack compute, grizzly, havana +1 more +3 moreOpenStack Nova Live migration can leak root disk into ephemeral storageCVE-2013-7130Fix available7.1 High
- openstack folsom, grizzly, havana +2 moreOpenStack Nova denial of service through compressed disk imagesCVE-2013-4463Fix available2.1 Low
- openstack oslo, redhat openstack +1 moreThe python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce...CVE-2013-6491Fix available4.3 Medium
- Show moreLoading…