Package impact

PyPI / cinder

CVE	Severity	CVSS	Risk	Published	Description
CVE-2015-5162	high	7.5	7.5	10y ago	OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption
CVE-2015-1851	medium	—	6.8	11y ago	OpenStack Cinder file disclosure in image convert
CVE-2013-4202	medium	—	4.3	13y ago	OpenStack Cinder Denial of Service using XML entities
CVE-2014-3641	medium	—	4.0	12y ago	OpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerability
CVE-2013-4183	low	—	2.1	13y ago	The clear_volume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive i…
CVE-2013-2255	unknown	—	—	4y ago	HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates.