OpenStack / Nova
39 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-46448 | openstack-nova: OpenStack Nova: Resource allocation issue due to unstripped hint data in server creation API | HIGH | 8.5 | Jun 16, 2026 |
| CVE-2026-24708 | openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova | HIGH | 8.2 | Feb 18, 2026 |
| CVE-2024-40767 | openstack-nova: Regression VMDK/qcow arbitrary file access | MEDIUM | 5.3 | Jul 24, 2024 |
| CVE-2024-32498 | OpenStack: malicious qcow2/vmdk images | HIGH | 7.1 | Jul 5, 2024 |
| CVE-2022-47951 | openstack: Arbitrary file access through custom VMDK flat descriptor | HIGH | 7.7 | Jan 26, 2023 |
| CVE-2022-37394 | openstack-nova: Compute service fails to restart if the vnic_type of a bound port changed from direct to macvtap | LOW | 3.3 | Aug 3, 2022 |
| CVE-2021-3654 | openstack-nova: novnc allows open redirection | MEDIUM | 6.1 | Mar 2, 2022 |
| CVE-2020-17376 | openstack-nova: Soft reboot after live-migration reverts instance to original source domain XML | HIGH | 8.7 | Aug 26, 2020 |
| CVE-2015-9543 | openstack-nova: leak consoleauth tokens into log files | LOW | 3.3 | Feb 19, 2020 |
| CVE-2013-0326 | nova: _base images permissions should not be world readable | MEDIUM | 5.5 | Dec 5, 2019 |
| CVE-2011-4076 | openstack-nova: EC2 API password leak | MEDIUM | 5.9 | Nov 26, 2019 |
| CVE-2019-14433 | openstack-nova: Nova server resource faults leak external exception details | HIGH | 7.1 | Aug 9, 2019 |
| CVE-2011-3147 | qcow format could expose host filesystem information | HIGH | 8.6 | Apr 22, 2019 |
| CVE-2017-18191 | openstack-nova: Swapping encrypted volumes can allow an attacker to corrupt the LUKS header causing a denial of service in the host | HIGH | 7.5 | Feb 19, 2018 |
| CVE-2017-17051 | openstack-nova: Nova FilterScheduler doubles resource allocations during rebuild with new image | HIGH | 8.6 | Dec 5, 2017 |
| CVE-2017-16239 | openstack-nova: Nova Filter Scheduler bypass through rebuild action | MEDIUM | 6.5 | Nov 14, 2017 |
| CVE-2017-7214 | openstack-nova: Sensitive information included in legacy notification exception contexts | CRITICAL | 9.8 | Mar 21, 2017 |
| CVE-2015-5162 | openstack-nova/glance/cinder: Malicious image may exhaust resources | HIGH | 7.5 | Oct 7, 2016 |
| CVE-2016-2140 | openstack-nova: Host data leak through resize/migration | MEDIUM | 5.3 | Apr 12, 2016 |
| CVE-2015-8749 | openstack-nova: Xen connection password leak in logs via StorageError | MEDIUM | 5.9 | Jan 15, 2016 |
| CVE-2015-7548 | openstack-nova: Unprivileged API user can access host data using instance snapshot | LOW | 3.5 | Jan 12, 2016 |
| CVE-2015-7713 | openstack-nova: network security group changes are not applied to running instances | MEDIUM | 5.0 | Oct 29, 2015 |
| CVE-2015-3280 | openstack-nova: Deleting instances in resize state fails | MEDIUM | 6.8 | Oct 26, 2015 |
| CVE-2015-3241 | openstack-nova: Nova instance migration process does not stop when instance is deleted | MEDIUM | 6.8 | Sep 8, 2015 |
| CVE-2015-0259 | openstack-nova: console Cross-Site WebSocket hijacking | MEDIUM | 5.1 | Apr 1, 2015 |
Showing 1 to 25 of 39 CVEs