Skip to contentOpenstack vulnerabilities
Newest
- openstack novaOpenStack Nova logs sensitive context from notification exceptionsCVE-2017-7214Fix available9.8 Critical
- openstack glanceOpenStack Glance Server-Side Request Forgery (SSRF)CVE-2017-7200Fix available5.8 Medium
- openstack nova-lxd, canonical ubuntu linux +1 moreOpenStack Nova-LXD bypass security restrictionsCVE-2017-5936Fix available7.5 High
- openstack puppet-gerritThe Gerrit configuration in the Openstack Puppet module for Gerrit (aka puppet-gerrit) improperly...CVE-2016-57376.1 Medium
- openstack heatIn OpenStack Heat, by launching a new Heat stack with a local URL an authenticated user may...CVE-2016-9185Fix available4.3 Medium
- openstack cinder, glance, nova +2 moreOpenStack Cinder, Glance, and Nova contain Uncontrolled Resource ConsumptionCVE-2015-5162Fix available7.5 High
- openstack manila, redhat openstack +1 moreOpenstack Manila Persistent XSS in Metadata fieldCVE-2016-6519Fix available5.4 Medium
- openstack compute \(nova\)OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which...CVE-2016-7498Fix available6.5 Medium
- openstack murano, murano-dashboard, python-muranoclient +1 more +3 moreOpenStack Murano Code ExecutionCVE-2016-4972Fix available9.8 Critical
- openstack horizon, redhat openstack, debian linux +2 moreOpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerabilityCVE-2016-4428Fix available5.4 Medium
- openstack neutronOpenStack Neutron Intended MAC-spoofing protection mechanism bypassCVE-2016-5363Fix available8.2 High
- openstack neutronOpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanismCVE-2016-5362Fix available8.2 High
- openstack neutronOpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanismCVE-2015-8914Fix available9.1 Critical
- openstack tripleo heat templates, redhat openstack +1 moreTripleO Heat templates might allow remote attackers to obtain sensitive information from private containersCVE-2015-5271Fix available7.5 High
- openstack image registry and delivery service \(glance\)OpenStack Image Service (Glance) vulnerable to Improper Access ControlCVE-2016-0757Fix available4.3 Medium
- openstack novaOpenStack Nova host data access through resize/migrationCVE-2016-2140Fix available5.3 Medium
- openstack tripleo heat templatesOpenStack TripleO Heat templates spoof metadata requestsCVE-2015-5303Fix available7.5 High
- openstack troveOpenstack DBaaS (Trove) Improper Link Resolution Before File AccessCVE-2015-3156Fix available5.5 Medium
- openstack keystone, keystonemiddleware, oracle solaris +2 moreOpenStack Identity Keystone and keystonemiddleware Insufficiently Protected CredentialsCVE-2015-7546Fix available7.5 High
- openstack swiftOpenStack Object Storage (Swift) allows remote attackers to cause a denial of serviceCVE-2016-0738Fix available7.5 High
- openstack swiftOpenStack Object Storage (Swift) allows remote attackers to cause a denial of serviceCVE-2016-0737Fix available7.5 High
- openstack orchestration api, redhat openstack, fedoraproject fedora +1 more +3 moreThe template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3 (kilo) and 5...CVE-2015-5295Fix available5.4 Medium
- openstack novaOpenStack Nova Potential Xen connection password leak via StorageErrorCVE-2015-8749Fix available5.9 Medium
- openstack swift3, fedoraproject fedora +1 moreSwift3 before 1.9 allows remote attackers to conduct replay attacks via an Authorization request...CVE-2015-8466Fix available7.4 High
- openstack novaOpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using...CVE-2015-7548Fix available3.5 Low
- openstack ironic inspectorInjection vulnerability that affects ironic-discoverdCVE-2015-5306Fix available6.8 Medium
- openstack novaOpenStack Compute (Nova) allows remote attackers to bypass intended restrictionCVE-2015-7713Fix available5.0 Medium
- openstack image registry and delivery service \(glance\)OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of serviceCVE-2015-5286Fix available6.8 Medium
- openstack novaOpenStack Compute (nova) allows remote authenticated users to cause a denial of serviceCVE-2015-3280Fix available6.8 Medium
- openstack swiftOpenStack Object Storage (Swift) Sensitive Data ExposureCVE-2015-5223Fix available5.0 Medium
- openstack neutronOpenStack Neutron Race condition vulnerabilityCVE-2015-5240Fix available3.5 Low
- openstack image registry and delivery service \(glance\)OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictionsCVE-2015-5251Fix available5.5 Medium
- openstack novaOpenStack Nova instance migration process does not stop when instance is deletedCVE-2015-3241Fix available6.8 Medium
- openstack neutronOpenStack Neutron Improper Input Validation vulnerabilityCVE-2015-3221Public exploitFix availableEPSS 11.4%4.0 Medium
- openstack horizon, debian linux, oracle solaris +2 moreOpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerabilityCVE-2015-3219Fix available4.3 Medium
- openstack glanceOpenStack Image Service (Glance) allows remote authenticated users to read arbitrary fileCVE-2015-5163Fix available3.5 Low
- openstack glanceOpenStack Glance before 2015.1.1 (kilo) allows remote authenticated users to cause a denial of...CVE-2015-3289Fix available4.0 Medium
- openstack icehouse, juno, kilo +1 more +3 moreOpenStack Cinder file disclosure in image convertCVE-2015-1851Fix available6.8 Medium
- openstack horizon, oracle solaris +1 moreMultiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0...CVE-2015-3988Fix available3.5 Low
- openstack keystone, oracle solaris +1 moreOpenStack Keystone Logs PasswordsCVE-2015-3646Fix available4.0 Medium
- openstack swift, canonical ubuntu linux +1 moreOpenStack Swift Unauthorized delete of versioned Swift objectCVE-2015-1856Fix available5.5 Medium
- openstack keystonemiddleware, python-keystoneclient, canonical ubuntu linux +2 moreOpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacksCVE-2015-1852Fix available4.3 Medium
- openstack novaOpenStack Compute (Nova) has Insufficient Verification of Data AuthenticityCVE-2015-0259Fix available5.1 Medium
- openstack image registry and delivery service \(glance\)OpenStack Glance Denial of service by creating a large number of imagesCVE-2015-1881Fix available4.0 Medium
- openstack image registry and delivery service \(glance\)OpenStack Glance Denial of service by creating a large number of imagesCVE-2014-9684Fix available4.0 Medium
- redhat openstack, openstack image registry and delivery service \(glance\) +1 moreOpenStack Glance Bypass the storage quota and Denial of serviceCVE-2014-9623Fix available4.0 Medium
- openstack image registry and delivery service \(glance\)OpenStack Glance v2 API unrestricted path traversal through filesystem:// schemeCVE-2015-1195Fix available6.5 Medium
- openstack neutron, litech router advertisement daemon +1 moreThe L3 agent in OpenStack Neutron 2014.2.x before 2014.2.2, when using radvd 2.0+, allows remote...CVE-2014-81534.0 Medium
- redhat openstack, openstack image registry and delivery service \(glance\) +1 moreThe V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4...CVE-2014-9493Fix available5.5 Medium
- openstack neutron, redhat openstack, fedoraproject fedora +2 moreOpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users...CVE-2014-7821Fix available4.0 Medium
- Show moreLoading…