Nova

Every one of the 30 is a mark on the map. Named now: 1 to 26, most at risk first.

1. An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw…CVE-2017-18191Openstack · 3.7% likely
2. OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended…CVE-2015-7713Openstack · 3.7% likely

   CWE-254

3. OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users t…CVE-2015-3241Openstack · 3.5% likely

   CWE-399

4. OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users…CVE-2015-3280Openstack · 3.4% likely

   CWE-399

5. OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list a…CVE-2014-3708Openstack · 2.8% likely

   CWE-399

6. An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appeari…CVE-2017-7214Openstack · 2.3% likely

   CWE-532

7. The volume_utils._parse_volume_info function in OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty) includes the connection_info dictionary in the S…CVE-2015-8749Openstack · 2.2% likely

   CWE-200

8. The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using raw storage and use_cow_images is set to false, allows remote…CVE-2016-2140Openstack · 2.1% likely

   CWE-200

9. OpenStack Compute (Nova) Essex before 2011.3 allows remote authenticated users to cause a denial of service (Nova-API log file and disk consumption) via a long server name.CVE-2012-1585Openstack · 2.1% likely

   CWE-399

10. The libvirt driver in OpenStack Compute (Nova) before 2013.2.2 and icehouse before icehouse-2 allows remote authenticated users to cause a denial of service (disk consumption) by…CVE-2013-6437Openstack · 2.0% likely

    CWE-399

11. Race condition in the VMware driver in OpenStack Compute (Nova) before 2014.1.4 and 2014.2 before 2014.2rc1 allows remote authenticated users to access unintended consoles by spaw…CVE-2014-8750Openstack · 2.0% likely

    CWE-362

12. The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resi…CVE-2014-8333Openstack · 2.0% likely

    CWE-399

13. An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked…CVE-2017-17051Openstack · 2.0% likely

    CWE-400

14. An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to…CVE-2019-14433Openstack · 2.0% likely

    CWE-209

15. api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easi…CVE-2014-3517Openstack · 2.0% likely

    CWE-200

16. OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to o…CVE-2013-2256Openstack · 1.8% likely

    CWE-264

17. OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenti…CVE-2015-7548Openstack · 1.8% likely

    CWE-200

18. An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that…CVE-2020-17376Openstack · 1.8% likely

    CWE-611

19. Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authe…CVE-2011-4596Openstack · 1.8% likely

    CWE-22

20. The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by p…CVE-2014-3608Openstack · 1.7% likely

    CWE-399

21. Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a…CVE-2012-2101Openstack · 1.5% likely

    CWE-264

22. In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler byp…CVE-2017-16239Openstack · 1.4% likely
23. OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hij…CVE-2015-0259Openstack · 1.1% likely

    CWE-345

24. In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK fl…CVE-2024-40767Openstack · CVSS 6.5 · 0.9% likely

    CWE-552

25. qcow format could expose host filesystem informationCVE-2011-3147Openstack · CVSS 2.8 · 0.7% likely

    CWE-200

26. OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots…CVE-2013-7048Openstack · 0.5% likely

    CWE-264

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.