Media
CVE-2026-54421
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 14
Restablecer filtros
Media
CVE-2026-48681
OpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO image
Media
CVE-2026-46447
OpenStack Ironic allows Boot Script Injection
Media
CVE-2026-44919
OpenStack Ironic: Pre-Validation Checksum Calculation allows Denial of Service (DoS) via Infinite Block Devices
Alta
CVE-2026-42997
OpenStack Ironic has an Incorrect Resource Transfer Between Spheres
Media
CVE-2026-42510
OpenStack Ironic is Vulnerable to Inclusion of Functionality from Untrusted Control Sphere
Media
CVE-2024-47211
OpenStack Ironic fails to verify checksums of supplied image_source URLs
Alta
CVE-2016-4985
OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor
Crítica
Explotada en ataques
CVE-2025-62593
Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack
Media
CVE-2026-50589
OpenStack Ironic: Crafted JSON String to Certain Endpoints on the API or JSON-RPC Service May Result in Service Crash
Alta
CVE-2026-43003
OpenStack Ironic Python Agent Includes Functionality from Untrusted Control Sphere
Baja
CVE-2025-44021
OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API). A malicious project assigned as a node owner can prov
Alta
CVE-2019-10141
A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's node_cache.
Alta
CVE-2015-5306
Injection vulnerability that affects ironic-discoverd
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.