ardana-barbican vulnerabilities (SUSE)
42 vulnerabilities.
ardana-barbicanSUSEsinatra does not validate expanded path matches7.5 Highardana-barbicanSUSEopenstack-barbican Denial of Service vulnerability4.9 Mediumardana-barbicanSUSEBarbican authorization flaw before v14.0.08.1 Highardana-barbicanSUSEArbitrary expression injection in Pillow9.8 Criticalardana-barbicanSUSEOut-of-bounds Read in Pillow6.5 Mediumardana-barbicanSUSEImproper Initialization in Pillow6.5 Mediumardana-barbicanSUSEgolang.org/x/net/http2 allows uncontrolled memory consumption7.5 Highardana-barbicanSUSEHTML Cleaner allows crafted and SVG embedded scripts to pass through8.2 Highardana-barbicanSUSEDirectory Traversal in Grafana4.3 Mediumardana-barbicanSUSEXSS in the `of` option of the `.position()` util6.5 Mediumardana-barbicanSUSEXSS in `*Text` options of the Datepicker widget6.5 Mediumardana-barbicanSUSEXSS in the `altField` option of the Datepicker widget6.5 Mediumardana-barbicanSUSEOpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value6.5 Mediumardana-barbicanSUSEOpenStack Keystone allows information disclosure during account locking7.5 Highardana-barbicanSUSElxml vulnerable to Cross-Site Scripting6.1 Mediumardana-barbicanSUSElxml vulnerable to Cross-site Scripting6.1 Mediumardana-barbicanSUSEOpenStack Manila Unprivileged users can retrieve, use and manipulate share networks8.3 Highardana-barbicanSUSEHTTP Response Splitting in Puma6.5 Mediumardana-barbicanSUSEmemcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str...7.5 Highardana-barbicanSUSEpython-engineio vulnerable to Cross-Site Request Forgery (CSRF)8.8 Highardana-barbicanSUSEAccess control bypass in Apache ZooKeeper5.9 Mediumardana-barbicanSUSEIn memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru...7.5 Highardana-barbicanSUSEImproper Certificate Validation in urllib37.5 Highardana-barbicanSUSEImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 Mediumardana-barbicanSUSENokogiri vulnerable to libxslt protection mechanism bypass9.8 Criticalardana-barbicanSUSEOpenStack Neutron overlapping security group rules prevents compute node network configuration6.5 Mediumardana-barbicanSUSEA vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An...6.5 Mediumardana-barbicanSUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumardana-barbicanSUSEOpenStack Neutron's unsupported dport option prevents applying security groups6.5 Mediumardana-barbicanSUSESQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 Criticalardana-barbicanSUSEUncontrolled Memory Consumption in Django7.5 Highardana-barbicanSUSESQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 Highardana-barbicanSUSEImproper Input Validation in Django6.5 Mediumardana-barbicanSUSEGrafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary...6.5 Mediumardana-barbicanSUSEImproper Neutralization of Input During Web Page Generation in LXML6.1 Mediumardana-barbicanSUSEPowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4...5.3 Mediumardana-barbicanSUSEPowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor...5.3 Mediumardana-barbicanSUSEDjango open redirect6.1 Mediumardana-barbicanSUSEA vulnerability was found in Openstack Glance. No limits are enforced within the Glance image...4.3 Mediumardana-barbicanSUSEOpenStack Nova DoS by rebuilding the same instance with a new image multiple times8.6 Highardana-barbicanSUSEUncontrolled Resource Consumption in Apache ZooKeeper7.5 Highardana-barbicanSUSErest-client allows local users to obtain sensitive information by reading the log2.1 Low