Medium
CVE-2026-50221
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 27
Reset filters
Low
CVE-2026-10801
ms-swift: Image Cache Hash Collision via Missing Dimension Metadata
High
CVE-2026-49017
OpenStack Swift: s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body
Low
CVE-2025-50460
MS SWIFT Remote Code Execution via unsafe PyYAML deserialization
Medium
CVE-2025-41419
MS SWIFT WEB-UI RCE Vulnerability
Medium
CVE-2022-47950
OpenStack Swift XML external entities (XXE) Injection
Medium
CVE-2013-4155
OpenStack Swift allows authenticated users to cause a denial of service
High
CVE-2016-0737
OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service
Medium
CVE-2014-3497
OpenStack Swift Cross-site Scriping vulnerability
High
CVE-2016-0738
OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service
Medium
CVE-2015-5223
OpenStack Object Storage (Swift) Sensitive Data Exposure
Medium
CVE-2015-1856
OpenStack Swift Unauthorized delete of versioned Swift object
Medium
CVE-2014-7960
OpenStack Swift metadata constraints are not correctly enforced
High
CVE-2013-2161
OpenStack Swift Unchecked user input in XML responses
Low
CVE-2017-8761
Temporary urls leaked via logging
Medium
CVE-2026-33551
An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application
Medium
ghsa-r54c-2xmf-2cf3
MS SWIFT Deserialization RCE Vulnerability
Medium
CVE-2023-26154
pubnub Insufficient Entropy vulnerability
Critical
CVE-2013-6396
The OpenStack Python client library for Swift (python-swiftclient) 1.0 through 1.9.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and
High
CVE-2014-0006
The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing
High
CVE-2015-5271
The TripleO Heat templates (tripleo-heat-templates) do not properly order the Identity Service (keystone) before the OpenStack Object Storage (Swift) staticweb middleware in the swiftproxy pipeline wh
Critical
CVE-2012-4406
OpenStack Object Storage (swift) Code Injection vulnerability
Low
CVE-2013-1840
The v1 API in OpenStack Glance Essex (2012.1), Folsom (2012.2), and Grizzly, when using the single-tenant Swift or S3 store, reports the location field, which allows remote authenticated users to obta
Critical
CVE-2017-16613
An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving (unhashed) tokens retrieved
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.