CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

9731 matches found

Chainguard•added 2026/09/30 8:54 p.m.•20 views

GHSA-R6X4-923Q-G947 vulnerabilities

Vulnerabilities for packages: authentik-fips, open-webui, superset-fips, nemo-rl-cuda-13.0, kserve, openstack-nova-2026.1, openstack-placement-2025.2, authentik, semgrep, airflow-core, openstack-horizon-2025.2-fips, mcp-atlassian, openstack-horizon-2026.1-fips, datadog-agent-fips,...

5.8AI score

SaveExploits0

Chainguard•added 2026/09/30 8:54 p.m.•23 views

GHSA-W6J9-CWV2-H6WQ vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/09/30 8:54 p.m.•18 views

CVE-2026-101917 vulnerabilities

7.5CVSS5.9AI score0.00418EPSS

SaveExploits1

Chainguard•added 2026/09/30 8:54 p.m.•25 views

CVE-2026-102268 vulnerabilities

9.1CVSS8.2AI score0.00202EPSS

SaveExploits2

Chainguard•added 2026/09/30 8:54 p.m.•22 views

GHSA-2GX3-RCP4-G85Q vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/09/30 8:54 p.m.•21 views

GHSA-9V7F-9G4P-FFGJ vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/09/30 8:54 p.m.•18 views

GHSA-P4G4-X82P-Q773 vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/09/30 8:54 p.m.•20 views

CVE-2026-102271 vulnerabilities

7.4CVSS7.3AI score0.0018EPSS

SaveExploits1

Chainguard•added 2026/09/30 8:54 p.m.•22 views

CVE-2026-102274 vulnerabilities

7.5CVSS6.2AI score0.00389EPSS

SaveExploits1

Chainguard•added 2026/09/30 8:54 p.m.•33 views

GHSA-FFC3-869F-JXW9 vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/09/30 8:54 p.m.•20 views

CVE-2026-102267 vulnerabilities

9.1CVSS5.8AI score0.00159EPSS

SaveExploits0

Ubuntu•added 2026/09/30 1:07 p.m.•14 views

USN-8854-1: OpenStack Keystone vulnerabilities

Grzegorz Grasza discovered that OpenStack Keystone did not consistently enforce restrictions for delegated authentication tokens. An authenticated attacker could possibly use this issue to create credentials or delegations that outlasted the delegated token. CVE-2026-80182 It was discovered that...

7.6CVSS5.9AI score0.00601EPSS

SaveExploits0

osv_usn•added 2026/09/30 1:07 p.m.•14 views

USN-8854-1 keystone vulnerabilities

7.6CVSS5.9AI score0.00601EPSS

SaveExploits0References4

RedhatCVE•added 2026/09/29 10:42 a.m.•17 views

CVE-2026-97149

A flaw was found in OpenStack Swift's tempurl middleware. A TempURL is a signed, time-limited link that should allow access to only one object. The signature does not cover extra request headers, and Swift did not block the X-Copy-From header on these signed upload requests. An attacker who alrea...

6.5CVSS5.5AI score0.00235EPSS

SaveExploits0References5

Debian•added 2026/09/29 3:10 a.m.•22 views

[SECURITY] [DLA 4800-1] glance security update

Debian LTS Advisory DLA-4800-1 [email protected] https://www.debian.org/lts/security/ Carlos Henrique Lima Melara September 29, 2026 https://wiki.debian.org/LTS Package : glance Version : 2:25.1.0-2+deb12u5 CVE ID : CVE-2026-71196 CVE-2026-71197 CVE-2026-71198 CVE-2026-77648 Debian Bug ...

7CVSS5.9AI score0.0045EPSS

SaveExploits0

Tenable Nessus•added 2026/09/29 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-51772

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Server-Side Request Forgery SSRF vulnerability exists in the Image API v2 of OpenStack Glance. When the showmultiplelocations configuration option is enabled ...

8.1CVSS5.7AI score0.003EPSS

SaveExploits0References2

Tenable Nessus•added 2026/09/29 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-51773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in the VMware datastore driver of OpenStack glancestore. When an authenticated attacker provides a maliciously crafted image location URI pointing to a...

5.8AI score0.00319EPSS

SaveExploits0References3

RedhatCVE•added 2026/09/25 2:28 p.m.•20 views

CVE-2026-51773

A flaw was found in the VMware datastore driver of OpenStack glancestore. When an authenticated user supplies a crafted image location Uniform Resource Identifier URI pointing to an external host, the driver fails to validate the destination before forwarding requests. An attacker can exploit thi...

6.5CVSS5.7AI score0.00319EPSS

SaveExploits0References4

NVD•added 2026/09/25 1:17 p.m.•19 views

CVE-2026-51772

A Server-Side Request Forgery SSRF vulnerability exists in the Image API v2 of OpenStack Glance. When the showmultiplelocations configuration option is enabled in glance-api.conf, an authenticated attacker can manipulate the locations attribute of an image in the queued state by sending a crafted...

6.5CVSS0.003EPSS

SaveExploits0References2

NVD•added 2026/09/25 1:17 p.m.•18 views

CVE-2026-51773

An issue in the VMware datastore driver of OpenStack glancestore. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, the retryrequest function fails to validate the destination host before attaching sensitive authentication headers...

8.1CVSS0.00319EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by