CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

546 matches found

RedHat Linux•added 2026/09/10 1:04 p.m.•4 views

openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova

A flaw in OpenStack Nova’s interaction with the qemu-img utility allows an authenticated user to overwrite arbitrary files on the compute host. This occurs because Nova invokes qemu-img without strictly constraining the disk image format, enabling a malicious user to craft a QCOW2 header on a raw...

8.2CVSS0.00374EPSS

SaveExploits0References5

RedHat Linux•added 2026/09/10 1:04 p.m.•4 views

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 security and bug fix advisory

Updated packages that resolve various issues are now available for Red Hat OpenStack Platform 17.1 Wallaby for Red Hat Enterprise Linux RHEL 9.2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which...

10CVSS0.02128EPSS

SaveExploits1References16

Chainguard•added 2026/08/19 2:17 a.m.•35 views

GHSA-F2FF-P2WW-7P4P vulnerabilities

Vulnerabilities for packages: openstack-placement-2026.1-fips, dbt-bigquery, openstack-horizon-2026.1, mlflow, openstack-placement-2025.1-fips, superset, mlflow-fips, openstack-horizon-2026.1-fips, pgadmin4, datahub-ingestion, openstack-glance-2025.1, openstack-glance-2026.1-fips, authentik-fips,...

5.9AI score

SaveExploits0

RedHat Linux•added 2026/08/13 11:45 p.m.•12 views

openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova

8.2CVSS5.5AI score0.00374EPSS

SaveExploits0References5

OSV•added 2026/07/13 2:36 p.m.•12 views

PYSEC-2026-2685 OpenStack Nova calls qemu-img without format restrictions for resize

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in a...

8.2CVSS6.1AI score0.00374EPSS

SaveExploits0References8

OSV•added 2026/07/13 2:19 p.m.•11 views

PYSEC-2026-2490 OpenStack Cinder, glance, and Nova vulnerable to Path Traversal

An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, a...

5.7CVSS6.1AI score0.01034EPSS

SaveExploits1References11

Chainguard•added 2026/07/07 8:24 p.m.•16 views

CVE-2015-3280 vulnerabilities