Cinder

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. The image parser in OpenStack Cinder 7.0.2 and 8.0.0 through 8.1.1; Glance before 11.0.1 and 12.0.0; and Nova before 12.0.4 and 13.0.0 does not properly limit qemu-img calls, whic…CVE-2015-5162Openstack · 3.1% likely

   CWE-399

2. The (1) backup (api/contrib/backups.py) and (2) volume transfer (contrib/volume_transfer.py) APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause…CVE-2013-4202Openstack · 2.6% likely

   CWE-399

3. The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from the Cinder-volume host by cloning and…CVE-2014-3641Openstack · 1.9% likely

   CWE-200

4. An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x befor…CVE-2022-47951Openstack · CVSS 5.7 · 1.1% likely

   CWE-22

5. An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supply…CVE-2024-32498Openstack · CVSS 6.5 · 0.8% likely

   CWE-552

6. The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when…CVE-2014-7231Openstack · 0.5% likely

   CWE-200

7. The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from comma…CVE-2014-7230Openstack · 0.5% likely

   CWE-200

8. The clear_volume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users t…CVE-2013-4183Openstack · 0.4% likely

   CWE-200

9. In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making t…CVE-2026-93856OpenStack · CVSS 4.3 · 0.4% likely

   CWE-669

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.