OpenNebula cross-site scripting vulnerabilities

OpenNebula is an open-source cloud computing platform developed by OpenNebula, used for managing heterogeneous distributed data center infrastructures. Version 6.10.0.1 of OpenNebula contains a cross-site scripting vulnerability. This vulnerability stems from a custom authentication driver that h...

CVE-2025-56537

A stored cross-site scripting (XSS) vulnerability exists in OpenNebula versions prior to 7.0 , specifically affecting the opennebula-sunstone component. Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the virtual network template parameter . This vulnerabil...

CVE-2025-56534

The opennebula-sunstone component in OpenNebula versions prior to 7.0 (specifically identified in version 6.10.0.1) is vulnerable to a stored cross-site scripting (XSS) vulnerability. The flaw exists within the custom authenticator driver , where an attacker can execute arbitrary web scripts or H...

CVE-2025-56535

A cross-site scripting XSS vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the zone attribute parameter...

CVE-2025-56536

A stored cross-site scripting XSS vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the user information parameter...

CVE-2025-56534

A cross-site scripting XSS vulnerability in the custom authenticator driver of opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2025-56537: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in opennebula v6.10.0.1 and fixed in v.7.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the virtual network template parameter...

CVE-2025-56536: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the user information parameter...

CVE-2025-56534: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the custom authenticator driver of opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2025-56535

A cross-site scripting XSS vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the zone attribute parameter...

CVE-2025-56535: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the zone attribute parameter...

Exploit for CVE-2025-56537

OpenNebula-CVE-2025-56537 Exploit Title : OpenNebula 6.10...

Exploit for CVE-2025-56536

OpenNebula-CVE-2025-56536 Exploit Title : OpenNebula 6.10...

EUVD-2022-40056

Malicious code in bioql PyPI...

EUVD-2022-40054

Malicious code in bioql PyPI...

EUVD-2022-40055

Malicious code in bioql PyPI...

EUVD-2025-23454

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-37424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Files or Directories Accessible to External Parties vulnerability in OpenNebula on Linux allows File Discovery. CVE-2022-37424 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2022-37425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in OpenNebula OpenNebula core on Linux allows Remote Code...

Linux Distros Unpatched Vulnerability : CVE-2022-37426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unrestricted Upload of File with Dangerous Type vulnerability in OpenNebula OpenNebula core on Linux allows File Content Injection. CVE-2022-37426 Note that...