CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7887 matches found

EUVD•added 2 hours ago•4 views

EUVD-2026-42777

OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization...

5.5CVSS5.9AI score

Exploits0References6

EUVD•added 2 hours ago•4 views

EUVD-2026-42781

In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the sendraw step to send arbitrary IPMI commands to a node, bypassing Ironic's access control...

8.2CVSS6AI score

Exploits0References3

NVD•added 4 hours ago•5 views

CVE-2026-54423

8.2CVSS

Exploits0References3

Cvelist•added 5 hours ago•6 views

CVE-2026-54423

8.2CVSS

Exploits0References2

CVE•added 5 hours ago•11 views

CVE-2026-54423

OpenStack Ironic (before 37.0.1) is vulnerable: a user capable of deploying nodes via IPMI can abuse the IPMI send_raw step to send arbitrary IPMI commands to a node, bypassing Ironic’s access control. Impact is high (CVE-2026-54423). The root cause is the exposure of IPMI send_raw in deployment ...

8.2CVSS6AI score

Exploits0References3

Nuclei•added 5 hours ago•130 views

Nova noVNC - Open Redirect

Nova noVNC contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2021-3654 info: name: Nova noVNC - Open Redirect author: geeknik severity: medium...

6.1CVSS6.8AI score0.26792EPSS

Exploits1References5

CVE•added 8 hours ago•6 views

CVE-2026-44918

OpenStack Ironic (up to 37.0.1) allows an authenticated project manager to create/modify nodes across projects without authorization, potentially misconfiguring which project owns a node and exposing secrets stored in volume connectors/targets. Red Hat notes a specific flaw where a manager can re...

5.5CVSS5.9AI score

Exploits0References5