https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:11:50.544384+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-02251 cnvd-2015-02251 2026-10-03T22:11:50.553574+00:00 cnvd-2015-02251 https://cve.radiocsirt.org/vuln/euvd-2026-89254 EUVD-2026-89254 2026-10-03T22:11:50.553613+00:00 EUVD-2026-89254 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0259 fkie_cve-2015-0259 2026-10-03T22:11:50.553627+00:00

OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage.

 https://cve.radiocsirt.org/vuln/ghsa-x8xr-rm9r-7mvf GHSA-x8xr-rm9r-7mvf — OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity 2026-10-03T22:11:50.553655+00:00

Affected: PyPI: nova

OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage.

 https://cve.radiocsirt.org/vuln/gsd-2015-0259 gsd-2015-0259 2026-10-03T22:11:50.553678+00:00 gsd-2015-0259 https://cve.radiocsirt.org/vuln/pysec-2026-883 PYSEC-2026-883 — OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity 2026-10-03T22:11:50.553690+00:00

Affected: PyPI: nova

OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage.

 https://cve.radiocsirt.org/vuln/rhsa-2015:0790 RHSA-2015:0790 — Red Hat Security Advisory: openstack-nova security, bug fix, and enhancement update 2026-10-03T22:11:50.553707+00:00

openstack-nova: console Cross-Site WebSocket hijacking

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0259 Withdrawn: UBUNTU-CVE-2015-0259 2026-10-03T22:11:50.553723+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: nova

OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage.