351 matches found
OpenStack Glance 安全漏洞
OpenStack Glance is an open-source service for storing and managing virtual machine images within OpenStack. Vulnerabilities exist in versions of OpenStack Glance prior to 29.1.1, as well as versions from 30.0.0 to 30.1.1 and 31.0.0. These vulnerabilities stem from URL validation checks that can ...
Linux Distros Unpatched Vulnerability : CVE-2026-34881
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery SSRF. By use of HTTP redirects, an authenticated user...
CVE-2026-34881: Server-Side Request Forgery (SSRF)
OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery SSRF. By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import functionality is affected. In particular, th...
Ubuntu: Security Advisory (USN-8111-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 22.04 LTS / 24.04 LTS / 25.10 : OpenStack Glance vulnerability (USN-8111-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8111-1 advisory. It was discovered that OpenStack Glance was incorrectly validating the IP addresses and the redirect destination URL when downloading or...
USN-8111-1: OpenStack Glance vulnerability
It was discovered that OpenStack Glance was incorrectly validating the IP addresses and the redirect destination URL when downloading or importing images from a remote source. An attacker could possibly use this issue to perform server-side request forgery and obtain sensitive information...
USN-8111-1 glance vulnerability
It was discovered that OpenStack Glance was incorrectly validating the IP addresses and the redirect destination URL when downloading or importing images from a remote source. An attacker could possibly use this issue to perform server-side request forgery and obtain sensitive information...
TencentOS Server 4: openstack-glance (TSSA-2025:0076)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0076 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
EUVD-2014-0105
Malware in sbrugna...
EUVD-2013-0043
Malware in sbrugna...
EUVD-2016-9457
Malware in sbrugna...
EUVD-2012-0040
Malware in sbrugna...
EUVD-2022-3539
Malicious code in bioql PyPI...
EUVD-2022-4293
Malicious code in bioql PyPI...
EUVD-2022-4275
Malicious code in bioql PyPI...
EUVD-2022-2682
Malicious code in bioql PyPI...
EUVD-2023-0288
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2022-4134
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual...
Linux Distros Unpatched Vulnerability : CVE-2016-4383
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause...
Linux Distros Unpatched Vulnerability : CVE-2013-4354
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The API before 2.1 in OpenStack Image Registry and Delivery Service Glance makes it easier for local users to inject images into arbitrary tenants by adding the...