Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:26:33 +0000 EUVD-2026-107331 https://cve.radiocsirt.org/vuln/euvd-2026-107331 EUVD-2026-107331 https://cve.radiocsirt.org/vuln/euvd-2026-107331 fkie_cve-2013-4202 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4202 <p>The (1) backup (api/contrib/backups.py) and (2) volume transfer (contrib/volume_transfer.py) APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664.</p> <p>The (1) backup (api/contrib/backups.py) and (2) volume transfer (contrib/volume_transfer.py) APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-4202 GHSA-mfg4-9xf4-f45q — OpenStack Cinder Denial of Service using XML entities https://cve.radiocsirt.org/vuln/ghsa-mfg4-9xf4-f45q <p><strong>Affected:</strong> PyPI: cinder</p> <p>The (1) backup (api/contrib/backups.py) and (2) volume transfer (contrib/volume_transfer.py) APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664.</p> <p><strong>Affected:</strong> PyPI: cinder</p> <p>The (1) backup (api/contrib/backups.py) and (2) volume transfer (contrib/volume_transfer.py) APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664.</p> https://cve.radiocsirt.org/vuln/ghsa-mfg4-9xf4-f45q gsd-2013-4202 https://cve.radiocsirt.org/vuln/gsd-2013-4202 gsd-2013-4202 https://cve.radiocsirt.org/vuln/gsd-2013-4202 PYSEC-2026-790 — OpenStack Cinder Denial of Service using XML entities https://cve.radiocsirt.org/vuln/pysec-2026-790 <p><strong>Affected:</strong> PyPI: cinder</p> <p>The (1) backup (api/contrib/backups.py) and (2) volume transfer (contrib/volume_transfer.py) APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664.</p> <p><strong>Affected:</strong> PyPI: cinder</p> <p>The (1) backup (api/contrib/backups.py) and (2) volume transfer (contrib/volume_transfer.py) APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664.</p> https://cve.radiocsirt.org/vuln/pysec-2026-790 RHSA-2013:1198 — Red Hat Security Advisory: openstack-cinder security update https://cve.radiocsirt.org/vuln/rhsa-2013:1198 <p>OpenStack: Cinder LVM volume driver does not support secure deletion OpenStack: Cinder Denial of Service using XML entities</p> <p>OpenStack: Cinder LVM volume driver does not support secure deletion OpenStack: Cinder Denial of Service using XML entities</p> https://cve.radiocsirt.org/vuln/rhsa-2013:1198