Glance

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download_image policy is configured, does not properly r…CVE-2013-4428Openstack · 3.1% likely

   CWE-264

2. An SSRF issue was discovered in OpenStack Glance before Newton. The 'copy_from' feature in the Image Service API v1 allowed an attacker to perform masked network port scans. With…CVE-2017-7200Openstack · 2.1% likely

   CWE-918

3. The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo), when using the V2 API, allows remote authenticated users to read arbitrary files via a…CVE-2015-5163Openstack · 1.5% likely

   CWE-200

4. OpenStack Glance before 2015.1.1 (kilo) allows remote authenticated users to cause a denial of service (disk consumption) by repeatedly using the import task flow API to create im…CVE-2015-3289Openstack · 1.3% likely

   CWE-399

5. The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision.CVE-2015-8234Openstack · 1.3% likely

   CWE-310

6. In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location to an image. Unlike the web-download import path, the location…CVE-2026-71198OpenStack · CVSS 7 · 0.4% likely

   CWE-918

7. In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing an admin to fetch internal URLs from the Glance service…CVE-2026-77648OpenStack · CVSS 2.2 · 0.3% likely

   CWE-918

8. OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL va…CVE-2026-34881OpenStack · CVSS 5 · 0.3% likely

   CWE-918

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.