nova vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-46448Mediumnova: OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints CVE-2026-24708HighNova: OpenStack Nova calls qemu-img without format restrictions for resize CVE-2024-40767MediumNova: OpenStack Nova vulnerable to unauthorized access to potentially sensitive data CVE-2024-32498Highcinder: OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access CVE-2022-47951Mediumcinder: OpenStack Cinder, glance, and Nova vulnerable to Path Traversal CVE-2022-37394Lownova: OpenStack Nova Changing vnic_type breaks compute service restart CVE-2020-17376Highnova: OpenStack Nova Live migration fails to update persistent domain XML CVE-2015-9543LowNova: OpenStack Nova can leak consoleauth token into log files CVE-2019-14433Highnova: OpenStack Nova Server Resource Faults Leak External Exception Details CVE-2012-3361Mediumnova: OpenStack Nova Arbitrary file injection/corruption through directory traversal issues CVE-2012-3360Mediumnova: OpenStack Nova Directory traversal vulnerability CVE-2012-3371LowNova: OpenStack Nova Scheduler denial of service through scheduler_hints CVE-2012-5625Mediumnova: OpenStack Nova Information leak in libvirt LVM-backed instances CVE-2013-4278Lownova: OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors CVE-2013-4179Mediumnova: OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack CVE-2013-4497Mediumnova: OpenStack Compute Nova Improper Access Control CVE-2013-2096Mediumnova: OpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image CVE-2013-6419Mediumnova: OpenStack Nova Router metadata queries are not restricted by tenant CVE-2014-2573Highnova: OpenStack Nova VMWare driver leaks rescued images CVE-2013-4463Lownova: OpenStack Nova denial of service through compressed disk images CVE-2013-4469Lownova: OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image CVE-2014-0134Lownova: OpenStack Nova host data leak to vm instance in rescue mode CVE-2014-0167Mediumnova: OpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests CVE-2015-2687Mediumnova: OpenStack Compute (Nova) Improper Access Control CVE-2012-2101Lownova: Openstack Compute (Nova) Denial of service via network request that triggers large number of iptables rules

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo