Wysoka
CVE-2026-34839
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 51
Wyczyść filtry
Wysoka
CVE-2026-33641
Glances Vulnerable to Command Injection via Dynamic Configuration Values
Wysoka
CVE-2026-33533
Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard
Wysoka
CVE-2026-32634
Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers
Średnia
CVE-2026-32632
Glances's REST/WebUI Lacks Host Validation and Remains Exposed to DNS Rebinding
Wysoka
CVE-2026-32611
Glances has a SQL Injection in DuckDB Export via Unparameterized DDL Statements
Wysoka
CVE-2026-32610
Glances's Default CORS Configuration Allows Cross-Origin Credential Theft
Wysoka
CVE-2026-32609
Glances has Incomplete Secrets Redaction: /api/v4/args Endpoint Leaks Password Hash and SNMP Credentials
Wysoka
CVE-2026-32608
Glances has a Command Injection via Process Names in Action Command Templates
Wysoka
CVE-2026-32596
Glances exposes the REST API without authentication
Krytyczna
CVE-2026-32633
Glances's Browser API Exposes Reusable Downstream Credentials via `/api/4/serverslist`
Wysoka
CVE-2026-30928
Glances Exposes Unauthenticated Configuration Secrets
Wysoka
CVE-2026-30930
Glances has SQL Injection via Process Names in TimescaleDB Export
Średnia
CVE-2024-32498
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
Średnia
CVE-2023-41893
Home Assistant vulnerable to account takeover via auth_callback login
Niska
CVE-2022-4134
A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.
Średnia
CVE-2022-47951
OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
Wysoka
CVE-2014-9684
OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption)
Wysoka
CVE-2015-1881
OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption)
Średnia
CVE-2015-8234
The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision.
Niska
CVE-2013-1840
The v1 API in OpenStack Glance Essex (2012.1), Folsom (2012.2), and Grizzly, when using the single-tenant Swift or S3 store, reports the location field, which allows remote authenticated users to obta
Wysoka
CVE-2015-5162
OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption
Wysoka
CVE-2013-4111
The Python client library for Glance (python-glanceclient) before 0.10.0 does not properly check the preverify_ok value, which prevents the server hostname from being verified with a domain name in th
Średnia
CVE-2021-23418
XML External Entity Reference in Glances
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.