CVE-2013-2006

CVE-2013-2006 Version: https://github.com/openstack/keystone/blob/d43e2a51a1ed7adbed3c5ddf001d46bc4a824ae8...

CVE-2017-18635

cve-2017-18635 PoC for CVE-2017-18635 Full article: Exploiting an old noVNC XSS CVE-2017-18635 in OpenStack...

bandit

.. image:: https://raw.githubusercontent.com/pycqa/bandit/main/logo/logotype-sm.png :alt: Bandit ====== .. image:: https://github.com/PyCQA/bandit/actions/workflows/pythonpackage.yml/badge.svg?branch=main :target:...

Nova noVNC - Open Redirect

Nova noVNC contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2021-3654 info: name: Nova noVNC - Open Redirect author: geeknik severity: medium...

manila: manila: Public Manila Share Allows Cross-Project Access-Rule and Export-Metadata Writes

A flaw was found in OpenStack Manila. When a file share is configured with public visibility, the service fails to verify project ownership before authorizing management operations. An authenticated user in a separate project can exploit this issue by submitting modification requests for public...

Critical: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (openstack-manila) security update

An update for openstack-manila is now available for Red Hat OpenStack Platform 17.1 Wallaby. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2013-0212

CVE-2013-0212 Verison: https://github.com/openstack/glance/tree/4b768a4a847a0f5c857f4fe3f3bca720da9b3949...

CVE-2026-47832

The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 inclusive...

CVE-2026-47832

The bosh-openstack-cpi-release component (versions v55 to v55.0.4 inclusive) is vulnerable to an information leak due to improper handling of application credentials. The application_credential_secret used to authenticate with OpenStack is inadvertently written in cleartext within the BOSH task d...

CVE-2026-47832 OpenStack Application Credentials Logged in Cleartext to BOSH Debug Logs

The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 inclusive...

EUVD-2026-124329

The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 inclusive...

CVE-2026-47832

The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 inclusive...

[SECURITY] [DLA 4895-1] aodh security update

Debian LTS Advisory DLA-4895-1 [email protected] https://www.debian.org/lts/security/ Carlos Henrique Lima Melara November 11, 2026 https://wiki.debian.org/LTS Package : aodh Version : 15.0.0-3+deb12u1 CVE ID : CVE-2026-76878 Debian Bug : 1144879 1153094 A vulnerability was discovered i...

CVE-2026-47832

The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 inclusive...

CVE-2026-47832: CloudFoundry Foundation bosh-openstack-cpi-release: The vulnerability lies in the way application credentials are handled within the BOSH deployment

The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 inclusive...

UBUNTU-CVE-2026-47832

The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 inclusive...

PT-2026-145731

The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 inclusive...

CVE-2026-47832 - OpenStack Application Credentials Logged in Cleartext to BOSH Debug Logs | Cloud Foundry

Severity High CVSS Score 7.3 High CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H Vendor CloudFoundry Foundation Versions Affected bosh-openstack-cpi-release All versions from v55 to v55.0.4 inclusive Description The vulnerability lies in the way application credentials are handle...

syntribos

======================== Team and repository tags .. image:: http://governance.openstack.org/badges/syntribos.svg :target: http://governance.openstack.org/reference/tags/index.html .. image:: http://img.shields.io/badge/docs-latest-brightgreen.svg?style=flat :target:...

CVE-2026-107363

A flaw was found in OpenStack Zaqar. In deployments utilizing the WebSocket transport, the service fails to bind subsequent communication requests to the project associated with the authenticated user's token. An authenticated remote attacker can substitute a target project's identifier to inspec...