Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 57
Reset filtersOpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction
OpenStack Nova host data access through resize/migration
OpenStack Compute (Nova) Denial of Service vulnerability
OpenStack Nova instance migration process does not stop when instance is deleted
OpenStack Oslo utility sensitive information exposure via log files
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity
OpenStack Nova VMware instance leak potentially leading to compute DoS
OpenStack Nova Filter Scheduler Bypass
OpenStack Nova DoS by rebuilding the same instance with a new image multiple times
OpenStack Nova Denial of service attack on the compute host
OpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor
Openstack nova qcow format could expose host filesystem information
Open Redirect in CPython that affects users of OpenStack Nova
TaskWeaver has Protection Mechanism Failure and Server-Side Request Forgery (SSRF)
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously underg
An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exceptio
virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an ima
OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption
OpenStack Nova logs sensitive context from notification exceptions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.