Most recent entries from all

cnvd-2015-00543

2026-10-10T00:24:16.150818+00:00

cnvd-2015-00543

EUVD-2026-90093

2026-10-10T00:24:16.150861+00:00

EUVD-2026-90093

fkie_cve-2015-1195

2026-10-10T00:24:16.150876+00:00

The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticated users to read or delete arbitrary files via a full pathname in a filesystem: URL in the image location property. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-9493.

GHSA-pwrj-f53c-f89j — OpenStack Glance v2 API unrestricted path traversal through filesystem:// scheme

2026-10-10T00:24:16.150910+00:00

Affected: PyPI: glance

The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticated users to read or delete arbitrary files via a full pathname in a `filesystem://` URL in the image location property. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-9493.

gsd-2015-1195

2026-10-10T00:24:16.150935+00:00

gsd-2015-1195

PYSEC-2026-815 — OpenStack Glance v2 API unrestricted path traversal through filesystem:// scheme

2026-10-10T00:24:16.150947+00:00

Affected: PyPI: glance

The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticated users to read or delete arbitrary files via a full pathname in a `filesystem://` URL in the image location property. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-9493.