https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:37:05.117079+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2014-3517 CVE-2014-3517 2026-10-03T23:37:05.118734+00:00

api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests.

 https://cve.radiocsirt.org/vuln/ghsa-xjmj-p278-4jp5 GHSA-xjmj-p278-4jp5 — OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability 2026-10-03T23:37:05.118779+00:00

Affected: PyPI: nova

api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests.