All products

cinder

PyPI · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
OpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerabilityCVE-2014-3641 · GHSA-QHCH-G8QR-P497Version ranges need review. cinderRed Hat OpenStack Platform 4/openstack-cinder PyPIRed Hat Medium Fix reported
OpenStack Cinder, glance, and Nova vulnerable to Path TraversalCVE-2022-47951 · GHSA-7H75-HWXX-QPGCVersion ranges need review. cinderglance PyPI Medium Fix reported
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file accessCVE-2024-32498 · GHSA-R4V4-W9PV-6FPHVersion ranges need review. cinderglance PyPI High No fix reported
OpenStack Keystone and other components vulnerable to Improper Certificate ValidationCVE-2013-2255 · GHSA-QH2X-HPF9-CF2GVersion ranges need review. cinderkeystone PyPIRed Hat Medium Fix reported
OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource ConsumptionCVE-2015-5162 · GHSA-G2J5-7VGX-6XRXVersion ranges need review. cinderglance PyPIRed Hat High Fix reported
Openstack cinder Improper handling of ScaleIO backend credentialsCVE-2020-10755 · GHSA-V3M2-PG96-W33MVersion ranges need review. cinderos-brick PyPIRed Hat High Fix reported
OpenStack Cinder Denial of Service using XML entities CVE-2013-4202 · GHSA-MFG4-9XF4-F45QVersion ranges need review. cinderRed Hat OpenStack Platform 4/openstack-cinder PyPIRed Hat Medium Fix reported
OpenStack Cinder file disclosure in image convertCVE-2015-1851 · GHSA-9HCJ-H2QC-689PVersion ranges need review. cinder PyPI Medium Fix reported
OpenStack Cinder LVMVolumeDriver does not zero deleted snapshotsCVE-2013-4183 · GHSA-Q3RW-WCJ6-8CJFVersion ranges need review. cinderRed Hat OpenStack Platform 4/openstack-cinder PyPIRed Hat Medium Fix reported