https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 03:00:44 +0000 https://cve.radiocsirt.org/vuln/cnvd-2024-20836 cnvd-2024-20836 https://cve.radiocsirt.org/vuln/cnvd-2024-20836 https://cve.radiocsirt.org/vuln/euvd-2026-160772 EUVD-2026-160772 https://cve.radiocsirt.org/vuln/euvd-2026-160772 https://cve.radiocsirt.org/vuln/fkie_cve-2024-29008 <p>A problem has been identified in the CloudStack additional VM configuration (extraconfig) feature which can be misused by anyone who has privilege to deploy a VM instance or configure settings of an already deployed VM instance, to configure additional VM configuration even when the feature is not explicitly enabled by the administrator. In a KVM based CloudStack environment, an attacker can exploit this issue to attach host devices such as storage disks, and PCI and USB devices such as network adapters and GPUs, in a regular VM instance that can be further exploited to gain access to the underlying network and storage infrastructure resources, and access any VM instance disks on the local storage.</p> <p>Users are advised to upgrade to version 4.18.1.1 or 4.19.0.1, which fixes this issue.</p> <p>A problem has been identified in the CloudStack additional VM configuration (extraconfig) feature which can be misused by anyone who has privilege to deploy a VM instance or configure settings of an already deployed VM instance, to configure additional VM configuration even when the feature is not explicitly enabled by the administrator. In a KVM based CloudStack environment, an attacker can exploit this issue to attach host devices such as storage disks, and PCI and USB devices such as network adapters and GPUs, in a regular VM instance that can be further exploited to gain access to the underlying network and storage infrastructure resources, and access any VM instance disks on the local storage.</p> <p>Users are advised to upgrade to version 4.18.1.1 or 4.19.0.1, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-29008 https://cve.radiocsirt.org/vuln/ghsa-3fpg-5xv7-pq63 <p>A problem has been identified in the CloudStack additional VM configuration (extraconfig) feature which can be misused by anyone who has privilege to deploy a VM instance or configure settings of an already deployed VM instance, to configure additional VM configuration even when the feature is not explicitly enabled by the administrator. In a KVM based CloudStack environment, an attacker can exploit this issue to attach host devices such as storage disks, and PCI and USB devices such as network adapters and GPUs, in a regular VM instance that can be further exploited to gain access to the underlying network and storage infrastructure resources, and access any VM instance disks on the local storage.</p> <p>Users are advised to upgrade to version 4.18.1.1 or 4.19.0.1, which fixes this issue.</p> <p>A problem has been identified in the CloudStack additional VM configuration (extraconfig) feature which can be misused by anyone who has privilege to deploy a VM instance or configure settings of an already deployed VM instance, to configure additional VM configuration even when the feature is not explicitly enabled by the administrator. In a KVM based CloudStack environment, an attacker can exploit this issue to attach host devices such as storage disks, and PCI and USB devices such as network adapters and GPUs, in a regular VM instance that can be further exploited to gain access to the underlying network and storage infrastructure resources, and access any VM instance disks on the local storage.</p> <p>Users are advised to upgrade to version 4.18.1.1 or 4.19.0.1, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-3fpg-5xv7-pq63 https://cve.radiocsirt.org/vuln/gsd-2024-29008 gsd-2024-29008 https://cve.radiocsirt.org/vuln/gsd-2024-29008 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0802 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache CloudStack ausnutzen, um die Authentifizierung zu umgehen, vertrauliche Informationen offenzulegen oder seine Privilegien zu erweitern und so die Kontrolle über das System zu übernehmen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache CloudStack ausnutzen, um die Authentifizierung zu umgehen, vertrauliche Informationen offenzulegen oder seine Privilegien zu erweitern und so die Kontrolle über das System zu übernehmen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0802