Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Tag: openstack Clear

ID	Title	Severity	Tags	Detected
CVE-2026-50221	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-50221) SSRF in ssrf (CVE-2026-50221). Risk of unauthorized operations or information disclosure.	Medium	Server-Side Request Forgery Cwe 918 Openstack Swift	2 weeks ago
CVE-2026-46448	Vulnerability in nova (CVE-2026-46448) vulnerability in nova (CVE-2026-46448). Risk of unauthorized operations or information disclosure.	Medium	Cwe 669 Openstack Nova	3 weeks ago
CVE-2026-50589	Vulnerability in openstack (CVE-2026-50589) vulnerability in openstack (CVE-2026-50589). Risk of unauthorized operations or information disclosure.	Medium	Cwe 770 Openstack Ironic Cwe 502	1 month ago
CVE-2026-48681	Vulnerability in path-traversal (CVE-2026-48681) vulnerability in path-traversal (CVE-2026-48681). Confidential information can be exposed externally.	Medium	Path Traversal Cwe 23 Openstack Ironic	1 month ago
CVE-2026-44917	Vulnerability in openstack (CVE-2026-44917) vulnerability in openstack (CVE-2026-44917). Confidential information can be exposed externally.	Medium	Cwe 669 Openstack Ironic	1 month ago
CVE-2026-46447	OpenStack Ironic through 35.0.x allows Boot Script Injection. OpenStack Ironic through 35.0.x allows Boot Script Injection.	Medium	Cwe 669 Openstack Ironic	1 month ago
CVE-2026-44394	Authorization Flaw in keystone (CVE-2026-44394) vulnerability in keystone (CVE-2026-44394). Risk of unauthorized operations or information disclosure. Exploitable via `POST /v3/auth/tokens`. Mitigation: upgrade to `29.0.2` or later.	Medium	Cwe 863 Openstack Keystone	1 month ago
CVE-2026-42998	Authorization Flaw in keystone (CVE-2026-42998) vulnerability in keystone (CVE-2026-42998). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `29.0.2` or later.	Medium	Cwe 863 Openstack Keystone	1 month ago
CVE-2026-42999	Vulnerability in keystone (CVE-2026-42999) vulnerability in keystone (CVE-2026-42999). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `29.0.2` or later.	Medium	Flask Cwe 863 Openstack Keystone +1	1 month ago
CVE-2026-43000	Vulnerability in keystone (CVE-2026-43000) vulnerability in keystone (CVE-2026-43000). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `29.0.2` or later.	Medium	Cwe 863 Openstack Keystone Cwe 266	1 month ago
CVE-2026-44916	Vulnerability in CVE-2026-44916 (CVE-2026-44916) vulnerability in CVE-2026-44916 (CVE-2026-44916). Risk of unauthorized operations or information disclosure.	Low	Cwe 1336 Openstack Ironic	2 months ago
CVE-2026-42997	Vulnerability in ironic-python-agent (CVE-2026-42997) vulnerability in ironic-python-agent (CVE-2026-42997). Confidential information can be exposed externally. Mitigation: upgrade to `26.1.6` or later.	High	Cwe 669 Openstack Ironic Cwe 201	2 months ago
CVE-2026-43003	OS Command Injection in ironic-python-agent (CVE-2026-43003) OS command injection in ironic-python-agent (CVE-2026-43003). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `11.6.0` or later.	High	Python Cwe 829 Cwe 78 Openstack +1	2 months ago
CVE-2026-43001	Authorization Flaw in keystone (CVE-2026-43001) vulnerability in keystone (CVE-2026-43001). Confidential information can be exposed externally. Exploitable via `POST /v3/credentials`.	High	Cwe 863 Openstack Keystone Cwe 1288	2 months ago
CVE-2026-42510	Vulnerability in ironic (CVE-2026-42510) vulnerability in ironic (CVE-2026-42510). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `35.0.1` or later.	Medium	Cwe 829 Openstack Ironic	2 months ago
CVE-2026-33551	Authorization Flaw in keystone (CVE-2026-33551) vulnerability in keystone (CVE-2026-33551). Confidential information can be exposed externally. Mitigation: upgrade to `26.1.1` or later.	Low	Cwe 863 Openstack Keystone	2 months ago
CVE-2026-34881	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-34881) SSRF in ssrf (CVE-2026-34881). Risk of unauthorized operations or information disclosure.	Medium	Server-Side Request Forgery Cwe 918 Openstack Glance	3 months ago
CVE-2018-3639	Vulnerability in intel (CVE-2018-3639) vulnerability in intel (CVE-2018-3639). Confidential information can be exposed externally.	Medium	Cwe 203 Intel Atom C Atom E +330	8 years ago
CVE-2017-17051	Vulnerability in dos (CVE-2017-17051) vulnerability in dos (CVE-2017-17051). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Openstack Nova	8 years ago
CVE-2017-16613	Authentication Bypass in swauth (CVE-2017-16613) authentication bypass in swauth (CVE-2017-16613). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `70af7986265a3defea054c46efc82d0698917298, 1.3.0` or later.	Critical	Cwe 287 Openstack Swauth Swift +2	8 years ago
CVE-2017-10379	Authorization Flaw in c (CVE-2017-10379) vulnerability in c (CVE-2017-10379). Confidential information can be exposed externally.	Medium	C Cwe 863 Oracle MySQL +19	8 years ago
CVE-2017-7549	Vulnerability in instack-undercloud (CVE-2017-7549) vulnerability in instack-undercloud (CVE-2017-7549). Confidential information can be exposed externally.	Medium	Cwe 377 Cwe 59 Openstack Instack Undercloud +1	8 years ago
CVE-2015-5695	Vulnerability in dos (CVE-2015-5695) vulnerability in dos (CVE-2015-5695). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 400 Openstack Designate	8 years ago
CVE-2017-12440	Vulnerability in openstack (CVE-2017-12440) vulnerability in openstack (CVE-2017-12440). Successful exploitation can lead to full system takeover.	High	Cwe 306 Openstack	8 years ago
CVE-2015-3156	Vulnerability in openstack (CVE-2015-3156) vulnerability in openstack (CVE-2015-3156). Data can be tampered with by attackers.	Medium	Cwe 59 Openstack Trove	8 years ago
CVE-2015-2687	Vulnerability in openstack (CVE-2015-2687) vulnerability in openstack (CVE-2015-2687). Confidential information can be exposed externally.	Medium	Cwe 284 Openstack Compute	8 years ago
CVE-2017-7980	Buffer Overflow in dos (CVE-2017-7980) vulnerability in dos (CVE-2017-7980). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 119 Qemu Canonical +13	8 years ago
CVE-2017-1000366	Buffer Overflow in redhat (CVE-2017-1000366) vulnerability in redhat (CVE-2017-1000366). Successful exploitation can lead to full system takeover.	High	Cwe 119 Redhat Enterprise Linux Enterprise Linux Desktop +25	9 years ago
CVE-2015-7514	Information Disclosure in openstack (CVE-2015-7514) vulnerability in openstack (CVE-2015-7514). Confidential information can be exposed externally.	Medium	Cwe 200 Openstack Ironic	9 years ago
CVE-2017-9214	Vulnerability in c (CVE-2017-9214) vulnerability in c (CVE-2017-9214). Successful exploitation can lead to full system takeover. Exploitable via ``ofputil_pull_queue_get_config_reply10``.	Critical	C Cwe 191 Openvswitch Debian +6	9 years ago
CVE-2017-8309	Vulnerability in c (CVE-2017-8309) vulnerability in c (CVE-2017-8309). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 772 Qemu +4	9 years ago
CVE-2017-8379	Vulnerability in dos (CVE-2017-8379) vulnerability in dos (CVE-2017-8379). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 772 Qemu Debian +3	9 years ago
CVE-2016-6519	Cross-Site Scripting (XSS) in redhat (CVE-2016-6519) cross-site scripting in redhat (CVE-2016-6519). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Redhat Openstack +1	9 years ago
CVE-2017-7400	Cross-Site Scripting (XSS) in openstack (CVE-2017-7400) cross-site scripting in openstack (CVE-2017-7400). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Openstack Horizon	9 years ago
CVE-2014-5009	Command Injection in snoopy (CVE-2014-5009) command injection in snoopy (CVE-2014-5009). Successful exploitation can lead to full system takeover.	Critical	Cwe 77 Snoopy Redhat Openstack +1	9 years ago
CVE-2014-5008	Snoopy allows remote attackers to execute arbitrary commands. Snoopy allows remote attackers to execute arbitrary commands.	Critical	Cwe 77 Snoopy Redhat Openstack +2	9 years ago
CVE-2008-7313	Command Injection in snoopy (CVE-2008-7313) command injection in snoopy (CVE-2008-7313). Successful exploitation can lead to full system takeover.	Critical	Cwe 77 Snoopy Redhat Openstack +1	9 years ago
CVE-2015-8234	Vulnerability in openstack (CVE-2015-8234) vulnerability in openstack (CVE-2015-8234). Data can be tampered with by attackers.	Medium	Cwe 310 Openstack Glance	9 years ago
CVE-2017-5973	Vulnerability in c (CVE-2017-5973) vulnerability in c (CVE-2017-5973). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 835 Qemu +6	9 years ago
CVE-2017-7214	Vulnerability in openstack (CVE-2017-7214) vulnerability in openstack (CVE-2017-7214). Successful exploitation can lead to full system takeover.	Critical	Cwe 532 Openstack Nova	9 years ago
CVE-2017-7200	SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-7200) SSRF in ssrf (CVE-2017-7200). Risk of unauthorized operations or information disclosure.	Medium	Server-Side Request Forgery Cwe 918 Openstack Glance	9 years ago
CVE-2016-7103	Cross-Site Scripting (XSS) in jqueryui (CVE-2016-7103) cross-site scripting in jqueryui (CVE-2016-7103). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Jqueryui Jquery Ui +18	9 years ago
CVE-2016-5737	Cross-Site Scripting (XSS) in openstack (CVE-2016-5737) cross-site scripting in openstack (CVE-2016-5737). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Openstack Puppet Gerrit	9 years ago

Vulnerabilities

🍪 About cookies