Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 20:41:39 +0000 cnvd-2015-04083 https://cve.radiocsirt.org/vuln/cnvd-2015-04083 cnvd-2015-04083 https://cve.radiocsirt.org/vuln/cnvd-2015-04083 EUVD-2026-90602 https://cve.radiocsirt.org/vuln/euvd-2026-90602 EUVD-2026-90602 https://cve.radiocsirt.org/vuln/euvd-2026-90602 fkie_cve-2015-1851 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1851 <p>OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the upload-to-image command.</p> <p>OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the upload-to-image command.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-1851 GHSA-9hcj-h2qc-689p — OpenStack Cinder file disclosure in image convert https://cve.radiocsirt.org/vuln/ghsa-9hcj-h2qc-689p <p><strong>Affected:</strong> PyPI: cinder</p> <p>OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the upload-to-image command.</p> <p><strong>Affected:</strong> PyPI: cinder</p> <p>OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the upload-to-image command.</p> https://cve.radiocsirt.org/vuln/ghsa-9hcj-h2qc-689p gsd-2015-1851 https://cve.radiocsirt.org/vuln/gsd-2015-1851 gsd-2015-1851 https://cve.radiocsirt.org/vuln/gsd-2015-1851 PYSEC-2026-789 — OpenStack Cinder file disclosure in image convert https://cve.radiocsirt.org/vuln/pysec-2026-789 <p><strong>Affected:</strong> PyPI: cinder</p> <p>OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the upload-to-image command.</p> <p><strong>Affected:</strong> PyPI: cinder</p> <p>OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the upload-to-image command.</p> https://cve.radiocsirt.org/vuln/pysec-2026-789 RHSA-2015:1206 — Red Hat Security Advisory: openstack-cinder security and bug fix update https://cve.radiocsirt.org/vuln/rhsa-2015:1206 <p>openstack-cinder: Host file disclosure through qcow2 backing file</p> <p>openstack-cinder: Host file disclosure through qcow2 backing file</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1206 Withdrawn: UBUNTU-CVE-2015-1851 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-1851 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: cinder</p> <p>OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the upload-to-image command.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: cinder</p> <p>OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the upload-to-image command.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-1851