OpenNebula-CVE-2025-56537

OpenNebula-CVE-2025-56537 Titre de l'exploit : OpenNebula 6.10.0.1 - XSS stocké Cross-site Scripting dans le modèle de réseau virtuel Auteur de l'exploit : Mark Artamonov Page d'accueil du fournisseur : https://opennebula.io/ Version testée : OpenNebula 6.10.0.1 Versions affectées : OpenNebula...

OpenNebula-CVE-2025-56535

OpenNebula-CVE-2025-56535 Название эксплойта : OpenNebula 6.10.0.1 - Хранимый XSS межсайтовый скриптинг в атрибуте зоны Автор эксплойта : Mark Artamonov Сайт производителя : https://opennebula.io/ Протестировано на версии : OpenNebula 6.10.0.1 Уязвимые версии : OpenNebula Доказательство концепции...

OpenNebula-CVE-2025-56536

OpenNebula-CVE-2025-56536 Название эксплойта : OpenNebula 6.10.0.1 - Хранимый XSS Cross-site Scripting в информации о пользователе Автор эксплойта : Mark Artamonov Домашняя страница вендора : https://opennebula.io/ Протестированная версия : OpenNebula 6.10.0.1 Затронутые версии : OpenNebula...

OpenNebula-CVE-2025-56534

OpenNebula-CVE-2025-56534 Titre de l'exploit : OpenNebula 6.10.0.1 - XSS stockée Cross-site Scripting dans le pilote d'authentification personnalisé Auteur de l'exploit : Mark Artamonov Page d'accueil du fournisseur : https://opennebula.io/ Version testée : OpenNebula 6.10.0.1 Versions affectées ...

Linux Distros Unpatched Vulnerability : CVE-2025-56536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stored cross-site scripting XSS vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payloa...

Linux Distros Unpatched Vulnerability : CVE-2025-56535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cross-site scripting XSS vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into...

Linux Distros Unpatched Vulnerability : CVE-2025-56537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stored cross-site scripting XSS vulnerability in opennebula v6.10.0.1 and fixed in v.7.0 allows attackers to execute arbitrary web scripts or HTML via injecti...

Linux Distros Unpatched Vulnerability : CVE-2025-56534

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cross-site scripting XSS vulnerability in the custom authenticator driver of opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML vi...

Linux Distros Unpatched Vulnerability : CVE-2026-84165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4. This vulnerability could allow an...

CVE-2026-84165

A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4. This vulnerability could allow an authenticated user with basic permissions to execute commands on virtual machines belonging to other users via the one.vm.exec function,...

CVE-2026-84165

A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4. This vulnerability could allow an authenticated user with basic permissions to execute commands on virtual machines belonging to other users via the one.vm.exec function,...

UBUNTU-CVE-2026-84165

A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4. This vulnerability could allow an authenticated user with basic permissions to execute commands on virtual machines belonging to other users via the one.vm.exec function,...

EUVD-2026-69013

A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4. This vulnerability could allow an authenticated user with basic permissions to execute commands on virtual machines belonging to other users via the one.vm.exec function,...

CVE-2026-84165

CVE-2026-84165 is an incorrect access control vulnerability in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4 . An authenticated user with basic permissions can execute arbitrary commands on virtual machines belonging to other users via the one.vm.exec function, which fails...

CVE-2026-84165 Lack of authorisation in OpenNebula by OpenNebula Systems

A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4. This vulnerability could allow an authenticated user with basic permissions to execute commands on virtual machines belonging to other users via the one.vm.exec function,...

CVE-2026-84165 Lack of authorisation in OpenNebula by OpenNebula Systems

A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4. This vulnerability could allow an authenticated user with basic permissions to execute commands on virtual machines belonging to other users via the one.vm.exec function,...

PT-2026-84143

Name of the Vulnerable Software and Affected Versions OpenNebula versions prior to 7.4 Description Incorrect access control allows an authenticated user with basic permissions to execute commands on virtual machines belonging to other users. This occurs via the one.vm.exec function due to a lack ...

CVE-2026-84165: Improper Access Control

A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4. This vulnerability could allow an authenticated user with basic permissions to execute commands on virtual machines belonging to other users via the one.vm.exec function,...

The vulnerability of the OpenNebula cloud management platform for virtual machines, related to the lack of measures taken to sanitize input data, allows a perpetrator to trigger a service failure.

The vulnerability of the OpenNebula cloud management platform for virtual machines is related to the lack of measures taken to sanitize input data. Exploiting this vulnerability could allow a malicious actor to trigger service failures...

CVE-2025-56537

A stored cross-site scripting XSS vulnerability in opennebula v6.10.0.1 and fixed in v.7.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the virtual network template parameter...