Cryptography

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates,…CVE-2013-4185Openstack · 2.1% likely

   CWE-310

2. OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a pas…CVE-2014-7144Openstack · 1.9% likely

   CWE-310

3. The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce SSL connections when qpid_protocol is set to ssl, which allows remote attackers t…CVE-2013-6491Openstack · 1.9% likely

   CWE-310

4. The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision.CVE-2015-8234Openstack · 1.3% likely

   CWE-310

5. Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended indefinitely if the instance's port is…CVE-2018-14636The Openstack Project · CVSS 5.3 · 1.2% likely

   CWE-300

6. OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hij…CVE-2015-0259Openstack · 1.1% likely

   CWE-345

7. A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual…CVE-2021-20267Openstack · 1.0% likely

   CWE-345

8. HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates.CVE-2013-2255OpenStack · 1.0% likely

   CWE-295

9. The OpenStack Python client library for Swift (python-swiftclient) 1.0 through 1.9.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers…CVE-2013-6396Openstack · 0.7% likely

   CWE-310

10. A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be revoked from when it is actually…CVE-2022-2447Openstack · 0.7% likely

    CWE-324

11. In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empty URL-Signature header, an unauthenticated remote attacker w…CVE-2026-97404OpenStack · CVSS 9.2 · 0.3% likely

    CWE-348

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.