| CVE-2015-5162 |
high |
7.5 |
7.5 |
|
|
|
10y ago |
The image parser in OpenStack Cinder 7.0.2 and 8.0.0 through 8.1.1; Glance before 11.0.1 and 12.0.0; and Nova before 12.0.4 and 13.0.0 does not properly limit qemu-img calls, which might allow attack… |
| CVE-2015-1851 |
medium |
— |
6.8 |
|
|
|
11y ago |
OpenStack Cinder file disclosure in image convert |
| CVE-2013-4202 |
medium |
— |
4.3 |
|
|
|
13y ago |
OpenStack Cinder Denial of Service using XML entities |
| CVE-2014-3641 |
medium |
— |
4.0 |
|
|
|
12y ago |
OpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerability |
| CVE-2024-32498 |
unknown |
— |
— |
|
|
|
2y ago |
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 … |
| CVE-2022-47951 |
unknown |
— |
— |
|
|
|
3y ago |
An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0… |
| CVE-2013-2255 |
unknown |
— |
— |
|
|
|
4y ago |
HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates. |
