CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

9834 matches found

PyPA•added 2026/07/06 8:03 a.m.•27 views

OpenStack Nova VMware instance leak potentially leading to compute DoS

The VMware driver in OpenStack Compute Nova before 2014.1.4 allows remote authenticated users to cause a denial of service disk consumption by deleting an instance in the resize state...

4CVSS5.9AI score0.02022EPSS

SaveExploits0References11Affected Software1

osv_pysec•added 2026/07/06 8:03 a.m.•20 views

PYSEC-2026-815 OpenStack Glance v2 API unrestricted path traversal through filesystem:// scheme

The V2 API in OpenStack Image Registry and Delivery Service Glance before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticated users to read or delete arbitrary files via a full pathname in a filesystem:// URL in the image location property. NOTE: this vulnerability exists because of...

6.5CVSS6.1AI score0.02792EPSS

SaveExploits0References14

PyPA•added 2026/07/06 8:03 a.m.•22 views

OpenStack Glance v2 API unrestricted path traversal through filesystem:// scheme

6.5CVSS6.1AI score0.02792EPSS

SaveExploits0References14Affected Software1

Chainguard•added 2026/07/03 8:22 p.m.•47 views

CVE-2026-43000 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.2-fips, openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2025.1, openstack-keystone-2025.2, openstack-keystone-2026.1...

8.8CVSS5.9AI score0.00425EPSS

SaveExploits1

Chainguard•added 2026/07/03 8:22 p.m.•46 views

CVE-2026-44394 vulnerabilities

8.1CVSS5.9AI score0.00321EPSS

SaveExploits1

Chainguard•added 2026/07/03 8:22 p.m.•37 views

GHSA-8F8M-WRVR-WCVF vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/07/03 8:22 p.m.•32 views

GHSA-Q623-F4J4-P4XJ vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/07/03 8:22 p.m.•54 views

CVE-2026-42998 vulnerabilities

8.8CVSS5.9AI score0.00404EPSS

SaveExploits1

Chainguard•added 2026/07/03 8:22 p.m.•44 views

CVE-2026-42999 vulnerabilities

8.8CVSS5.9AI score0.00424EPSS

SaveExploits1

Chainguard•added 2026/07/03 8:22 p.m.•53 views

GHSA-2R23-2G6V-2M5F vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/07/03 8:22 p.m.•44 views

GHSA-WHQR-FGM5-X77Q vulnerabilities

5.8AI score

SaveExploits0

PyPA•added 2026/07/02 2:13 p.m.•22 views

OpenStack Nova Filter Scheduler Bypass

In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters for example, the ImagePropertiesFilter or the IsolatedHostsFilter. All setups using Nova Filter...

6.5CVSS6.3AI score0.01421EPSS

SaveExploits0References15Affected Software1

PyPA•added 2026/07/02 2:13 p.m.•20 views

OpenStack Nova DoS by rebuilding the same instance with a new image multiple times

An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was...

8.6CVSS6.3AI score0.01989EPSS

SaveExploits0References11Affected Software1

osv_pysec•added 2026/07/02 2:13 p.m.•32 views

PYSEC-2026-692 OpenStack Nova DoS by rebuilding the same instance with a new image multiple times

8.6CVSS7.7AI score0.01989EPSS

SaveExploits0References11

PyPA•added 2026/07/02 2:13 p.m.•23 views

Openstack tripleo-heat-templates unauthenticated file access

A resource-permission flaw was found in the tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thu...

6.3CVSS6.5AI score0.00287EPSS

SaveExploits0References11Affected Software1

osv_pysec•added 2026/07/02 2:13 p.m.•30 views

PYSEC-2026-754 Openstack tripleo-heat-templates unauthenticated file access

6.3CVSS6.5AI score0.00287EPSS

SaveExploits0References11

osv_pysec•added 2026/07/02 2:13 p.m.•25 views

PYSEC-2026-619 Openstack Aodh can be used to launder Keystone trusts

Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http, which allows remote authenticated users with knowledge of trust ID...

7.5CVSS6.6AI score0.02146EPSS

SaveExploits0References13

osv_pysec•added 2026/07/02 2:13 p.m.•22 views

PYSEC-2026-694 OpenStack Nova Filter Scheduler Bypass

6.5CVSS6.3AI score0.01421EPSS

SaveExploits0References15

PyPA•added 2026/07/02 2:13 p.m.•21 views

Openstack Aodh can be used to launder Keystone trusts

7.5CVSS6.6AI score0.02146EPSS

SaveExploits0References13Affected Software1

PyPA•added 2026/07/02 2:13 p.m.•22 views

OpenStack Nova Denial of service attack on the compute host

An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw volume and corrupt the LUKS header, resulting in a denial of service attack on the compute host. The same code error...

7.8CVSS6.9AI score0.03715EPSS

SaveExploits1References15Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by