8560 matches found
GHSA-JQ35-7PRP-9V3F vulnerabilities
Vulnerabilities for packages: wazuh-manager, openstack-glance-2026.1, kserve, openstack-horizon-2025.2, openstack-glance-2025.1-fips, openstack-horizon-2025.2-fips, ggshield, openstack-keystone-2025.1, openstack-keystone-2026.1, openstack-keystone-2025.1-fips, openstack-placement-2025.2,...
GHSA-W7VC-732C-9M39 vulnerabilities
Vulnerabilities for packages: wazuh-manager, openstack-glance-2026.1, kserve, openstack-horizon-2025.2, openstack-glance-2025.1-fips, openstack-horizon-2025.2-fips, ggshield, openstack-keystone-2025.1, openstack-keystone-2026.1, openstack-keystone-2025.1-fips, openstack-placement-2025.2,...
GHSA-XGMM-8J9V-C9WX vulnerabilities
Vulnerabilities for packages: wazuh-manager, openstack-glance-2026.1, kserve, openstack-horizon-2025.2, openstack-glance-2025.1-fips, openstack-horizon-2025.2-fips, ggshield, openstack-keystone-2025.1, openstack-keystone-2026.1, openstack-keystone-2025.1-fips, openstack-placement-2025.2,...
CVE-2026-46448
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation...
CVE-2026-54421
A flaw was found in OpenStack Ironic. When an authorized user applies a PATCH operation to update volume properties, the system can inadvertently expose sensitive information, such as iSCSI credentials. This information disclosure vulnerability allows an attacker to gain access to credentials tha...
CVE-2026-48522 vulnerabilities
Vulnerabilities for packages: wazuh-manager, openstack-glance-2026.1, kserve, openstack-horizon-2025.2, openstack-glance-2025.1-fips, openstack-horizon-2025.2-fips, ggshield, openstack-keystone-2025.1, openstack-keystone-2026.1, openstack-keystone-2025.1-fips, openstack-placement-2025.2,...
GHSA-993G-76C3-P5M4 vulnerabilities
Vulnerabilities for packages: wazuh-manager, openstack-glance-2026.1, kserve, openstack-horizon-2025.2, openstack-glance-2025.1-fips, openstack-horizon-2025.2-fips, ggshield, openstack-keystone-2025.1, openstack-keystone-2026.1, openstack-keystone-2025.1-fips, openstack-placement-2025.2,...
USN-8433-1: OpenStack Keystone vulnerabilities
It was discovered that OpenStack Keystone allowed restricted application credentials to create EC2 credentials. An authenticated attacker with only a reader role could possibly use this issue to bypass the role restrictions imposed on the application credential. CVE-2026-33551 It was discovered...
SUSE CVE-2026-54421
In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information such as iSCSI credentials. The PATCH outcome is a security issue; the POST outcome is not a security issue...
CVE-2026-46448
OpenStack Nova before 33.0.2 is affected: the server create API does not strip internal _nova-prefixed scheduler hints, causing instances to be created without proper Placement allocation. This can enable resource misallocation and, in worst cases, denial of service through compute-node resource ...
CVE-2026-46448
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation...
CVE-2026-46448
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation...
UBUNTU-CVE-2026-46448
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation...
CVE-2026-46448
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation...
PT-2026-49828
Name of the Vulnerable Software and Affected Versions OpenStack Nova versions prior to 33.0.2 Description The server create API does not strip certain hint data, which results in the created instance having no Placement allocation. Recommendations Update to version 33.0.2...
CVE-2026-46448
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation...
CVE-2026-46448
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation...
GHSA-J4CW-MCG2-2Q78 OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties
In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information such as iSCSI credentials. The PATCH outcome is a security issue; the POST outcome is not a security issue...
OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties
In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information such as iSCSI credentials. The PATCH outcome is a security issue; the POST outcome is not a security issue...
CVE-2026-54421
In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information such as iSCSI credentials. The PATCH outcome is a security issue; the POST outcome is not a security issue...