OpenStack / Compute
12 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2013-2255 | openstack-*: Inconsistent and non-validating HTTPS client | MEDIUM | 5.9 | Nov 1, 2019 |
| CVE-2015-2687 | openstack-nova: information leak when live-migration failed | MEDIUM | 6.0 | Aug 9, 2017 |
| CVE-2014-0134 | openstack-nova: Nova host data leak to vm instance in rescue mode | LOW | 2.3 | May 8, 2014 |
| CVE-2014-0167 | openstack-nova: RBAC policy not properly enforced in Nova EC2 API | MEDIUM | 5.2 | Apr 15, 2014 |
| CVE-2014-2573 | openstack-nova: Nova VMware driver leaks rescued images | HIGH | 7.1 | Mar 25, 2014 |
| CVE-2013-7130 | nova: Live migration can leak root disk into ephemeral storage | HIGH | 8.7 | Feb 6, 2014 |
| CVE-2013-2030 | keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which al… | MEDIUM | 4.3 | Dec 27, 2013 |
| CVE-2013-4185 | OpenStack: Nova network source security groups denial of service | MEDIUM | 4.0 | Oct 29, 2013 |
| CVE-2013-4278 | OpenStack: Nova private flavors resource limit circumvention incomplete fix for CVE-2013-2256 | LOW | 3.5 | Sep 16, 2013 |
| CVE-2013-4179 | OpenStack: Nova XML entities DoS | MEDIUM | 4.3 | Sep 16, 2013 |
| CVE-2012-3371 | The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote authent… | LOW | 3.5 | Jul 17, 2012 |
| CVE-2012-2654 | The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security g… | MEDIUM | 4.3 | Jun 21, 2012 |
Showing 1 to 12 of 12 CVEs