What’s Vulnerable › Products
nova_libvirt container provided by the Red Hat OpenStack Platform vulnerabilities
39 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.
Exploited nova_libvirt container provided by the Red Hat OpenStack Platform vulnerabilities
- CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability
Latest nova_libvirt container provided by the Red Hat OpenStack Platform vulnerabilities
- CVE-2023-1932 — Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss (CVSS 6.1)
- CVE-2024-8007 — Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors (CVSS 8.1)
- CVE-2024-7319 — Openstack-heat: incomplete fix for cve-2023-1625 (CVSS 5.0)
- CVE-2023-6725 — Tripleo-ansible: bind keys are world readable (CVSS 5.5)
- CVE-2023-48795 — (CVSS 5.9)
- CVE-2023-5625 — Python-eventlet: patch regression for cve-2021-21419 in some red hat builds (CVSS 7.5)
- CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability (CVSS 7.5) — exploited
- CVE-2023-1636 — Incomplete container isolation (CVSS 5.0)
- CVE-2023-1633 — Insecure barbican configuration file leaking credential (CVSS 5.5)
- CVE-2023-1625 — Information leak in api (CVSS 5.0)
- CVE-2022-3596 — Instack-undercloud: rsync leaks information to undercloud (CVSS 7.5)
- CVE-2022-3261 — Plain-text passwords saved in /var/log/messages (CVSS 7.5)
- CVE-2023-1108 — Undertow: infinite loop in sslconduit during close (CVSS 7.5)
- CVE-2023-3637 — Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277) (CVSS 6.5)
- CVE-2023-3354 — Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service (CVSS 7.5)
- CVE-2023-1668 — (CVSS 8.2)
- CVE-2022-3277 — (CVSS 6.5)
- CVE-2022-3100 — (CVSS 5.9)
- CVE-2022-23451 — (CVSS 8.1)
- CVE-2022-2447 — (CVSS 6.6)
- CVE-2022-23452 — (CVSS 4.9)
- CVE-2022-2132 — (CVSS 8.6)
- CVE-2022-0718 — (CVSS 4.9)
- CVE-2021-3563 — (CVSS 7.4)
- CVE-2021-3979 — (CVSS 6.5)