ardana-cobbler vulnerabilities (SUSE)
87 vulnerabilities.
ardana-cobblerSUSEDjango `Trunc()` and `Extract()` database functions vulnerable to SQL Injection9.8 Criticalardana-cobblerSUSESQL Injection in Django9.8 Criticalardana-cobblerSUSEHTTP Request Smuggling in puma9.1 Criticalardana-cobblerSUSEgolang.org/x/net/http2 allows uncontrolled memory consumption7.5 Highardana-cobblerSUSESnapshot authentication bypass in grafana9.8 Criticalardana-cobblerSUSEDjango Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks7.5 Highardana-cobblerSUSEPath Traversal in Django4.9 Mediumardana-cobblerSUSEImproper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet5.3 Mediumardana-cobblerSUSEPath Traversal in Django7.5 Highardana-cobblerSUSEDirectory Traversal in Django5.3 Mediumardana-cobblerSUSEDenial of service in Grafana7.5 Highardana-cobblerSUSEActiverecord-session_store Vulnerable to Timing Attack5.3 Mediumardana-cobblerSUSEWeb Cache Poisoning5.9 Mediumardana-cobblerSUSEAuthentication Bypass in Apache Cassandra7.5 Highardana-cobblerSUSEOpen default xmlsec1 key-type preference6.5 Mediumardana-cobblerSUSESAML XML Signature wrapping6.5 Mediumardana-cobblerSUSEXXE in Nokogiri2.6 Lowardana-cobblerSUSEpy vulnerable to Regular Expression Denial of Service7.5 Highardana-cobblerSUSEFlask-Cors Directory Traversal vulnerability7.5 Highardana-cobblerSUSEOpenStack Nova Live migration fails to update persistent domain XML8.3 Highardana-cobblerSUSEGrafana stored XSS5.4 Mediumardana-cobblerSUSEIt was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in...4.3 Mediumardana-cobblerSUSEOut-of-bounds reads in Pillow5.5 Mediumardana-cobblerSUSEOut-of-bounds read in Pillow8.1 Highardana-cobblerSUSEOut-of-bounds reads in Pillow5.5 Mediumardana-cobblerSUSEOut-of-bounds read in Pillow5.5 Mediumardana-cobblerSUSERack allows Percent-encoded cookies to overwrite existing prefixed cookie names7.5 Highardana-cobblerSUSEOpenstack cinder Improper handling of ScaleIO backend credentials6.5 Mediumardana-cobblerSUSEServer Side Request Forgery in Grafana8.2 Highardana-cobblerSUSEXSS in Django6.1 Mediumardana-cobblerSUSEData leakage via cache key collision in Django5.9 Mediumardana-cobblerSUSEGrafana XSS via adding a link in General feature6.1 Mediumardana-cobblerSUSEGrafana XSS via a column style6.1 Mediumardana-cobblerSUSEGrafana XSS in Dashboard Text Panel6.1 Mediumardana-cobblerSUSEGrafana version < 6.7.3 is vulnerable for annotation popup XSS.6.1 Mediumardana-cobblerSUSESQL injection in Django8.8 Highardana-cobblerSUSEOS Command Injection in ansible7.4 Highardana-cobblerSUSEmysql-systemd-helper allows setting 640 permissions of arbitrary files5.1 Mediumardana-cobblerSUSEcrowbar provision leaks admin password to all nodes in cleartext9.3 Criticalardana-cobblerSUSESQL injection in Django9.8 Criticalardana-cobblerSUSElibxml as used in Nokogiri has an infinite loop in a certain end-of-file situation7.5 Highardana-cobblerSUSEVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...5.9 Mediumardana-cobblerSUSEUncontrolled Resource Consumption in Pillow7.5 Highardana-cobblerSUSEBuffer Copy without Checking Size of Input in Pillow9.8 Criticalardana-cobblerSUSEPCX P mode buffer overflow in Pillow9.8 Criticalardana-cobblerSUSEOut-of-bounds Read in Pillow7.1 Highardana-cobblerSUSEHTTP Request Smuggling in Waitress: Invalid whitespace characters in headers7.1 Highardana-cobblerSUSEHTTP Request Smuggling: Content-Length Sent Twice in Waitress7.1 Highardana-cobblerSUSEHTTP Request Smuggling: LF vs CRLF handling in Waitress7.1 Highardana-cobblerSUSEHTTP Request Smuggling: Invalid Transfer-Encoding in Waitress7.1 High- Show olderLoading…