← Back

Openstack

openstack

Vendor: Redhat • 210 CVEs

CVEs (210)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2013-2029
1Redhat
1Openstack
Apr 29, 2026
Nov 23, 2013
N/A· v4
N/A· v3
6.3 MEDIUM· v2
nagios.upgrade_to_v3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5.1, and earlier, allows local users to overwrite arbitrary files via a symlink attack on a temporary nagioscfg file with a...Show more
nagios.upgrade_to_v3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5.1, and earlier, allows local users to overwrite arbitrary files via a symlink attack on a temporary nagioscfg file with a predictable name in /tmp/.Show less
CVE-2013-4386
2Redhat
Theforeman
2Foreman
Openstack
Apr 29, 2026
Nov 20, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in app/models/concerns/host_common.rb in Foreman before 1.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) fqdn or (2) hostgroup parameter.
CVE-2013-4261
2Openstack
Redhat
3Folsom
GrizzlyOpenstack
Apr 29, 2026
Oct 29, 2013
N/A· v4
N/A· v3
3.5 LOW· v2
OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (...Show more
OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.Show less
CVE-2013-4185
2Openstack
Redhat
2Compute
Openstack
Apr 29, 2026
Oct 29, 2013
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users t...Show more
Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service (nova-network consumption) via a large number of server-creation operations, which triggers a large number of update requests.Show less
CVE-2013-4222
4Canonical
FedoraprojectOpenstack+1 more
4Fedora
KeystoneOpenstack+1 more
Apr 29, 2026
Sep 30, 2013
N/A· v4
N/A· v3
6.5 MEDIUM· v2
OpenStack Identity (Keystone) Folsom, Grizzly 2013.1.3 and earlier, and Havana before havana-3 does not properly revoke user tokens when a tenant is disabled, which allows remote authenticated users to retain access via...Show more
OpenStack Identity (Keystone) Folsom, Grizzly 2013.1.3 and earlier, and Havana before havana-3 does not properly revoke user tokens when a tenant is disabled, which allows remote authenticated users to retain access via the token.Show less
CVE-2013-4182
2Redhat
Theforeman
2Foreman
Openstack
Apr 29, 2026
Sep 16, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
app/controllers/api/v1/hosts_controller.rb in Foreman before 1.2.2 does not properly restrict access to hosts, which allows remote attackers to access arbitrary hosts via an API request.
CVE-2013-4180
2Redhat
Theforeman
2Foreman
Openstack
Apr 29, 2026
Sep 16, 2013
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The (1) power and (2) ipmi_boot actions in the HostController in Foreman before 1.2.2 allow remote attackers to cause a denial of service (memory consumption) via unspecified input that is converted to a symbol.
CVE-2013-2121
2Redhat
Theforeman
2Foreman
Openstack
Apr 29, 2026
Jul 31, 2013
N/A· v4
N/A· v3
6.0 MEDIUM· v2
Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary code via a controller...Show more
Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary code via a controller name attribute.Show less
CVE-2013-2113
2Redhat
Theforeman
2Foreman
Openstack
Apr 29, 2026
Jul 31, 2013
N/A· v4
N/A· v3
6.0 MEDIUM· v2
The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create or edit other users to gain privileges by (1) changing the admin flag or (...Show more
The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create or edit other users to gain privileges by (1) changing the admin flag or (2) assigning an arbitrary role.Show less
CVE-2013-2882
4Debian
GoogleNodejs+1 more
4Chrome
Debian LinuxNode.js+1 more
Apr 29, 2026
Jul 31, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
Google V8, as used in Google Chrome before 28.0.1500.95, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."