ardana-horizon vulnerabilities (SUSE)
30 vulnerabilities.
ardana-horizonSUSEDjango Directory Traversal via archive.extract5.3 Mediumardana-horizonSUSEIt was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in...4.3 Mediumardana-horizonSUSEcrowbar provision leaks admin password to all nodes in cleartext9.3 Criticalardana-horizonSUSEPotential DOS attack in Puma5.3 Mediumardana-horizonSUSEIn Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This...7.5 Highardana-horizonSUSENokogiri Command Injection Vulnerability9.8 Criticalardana-horizonSUSEpython-engineio vulnerable to Cross-Site Request Forgery (CSRF)8.8 Highardana-horizonSUSEUninitialized read in Nokogiri gem5.3 Mediumardana-horizonSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...4.9 Mediumardana-horizonSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...4.9 Mediumardana-horizonSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....4.4 Mediumardana-horizonSUSEImproper Certificate Validation in urllib37.5 Highardana-horizonSUSEImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 Mediumardana-horizonSUSENokogiri vulnerable to libxslt protection mechanism bypass9.8 Criticalardana-horizonSUSEOpenStack Neutron overlapping security group rules prevents compute node network configuration6.5 Mediumardana-horizonSUSEA vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An...6.5 Mediumardana-horizonSUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumardana-horizonSUSEOpenStack Neutron's unsupported dport option prevents applying security groups6.5 Mediumardana-horizonSUSESQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 Criticalardana-horizonSUSEUncontrolled Memory Consumption in Django7.5 Highardana-horizonSUSESQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 Highardana-horizonSUSEImproper Input Validation in Django6.5 Mediumardana-horizonSUSEGrafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary...6.5 Mediumardana-horizonSUSESecurity update for crowbar-core, crowbar-openstack, grafana, novnc, openstack-keystone, openstack-neutron, openstack-neutron-lbaas, openstack-nova, openstack-tempest, python-pysaml2, python-urllib3,…No scoreardana-horizonSUSEGrafana Authentication Bypass9.8 Criticalardana-horizonSUSEDjango open redirect6.1 Mediumardana-horizonSUSEA vulnerability was found in Openstack Glance. No limits are enforced within the Glance image...4.3 Mediumardana-horizonSUSEOpenStack Nova DoS by rebuilding the same instance with a new image multiple times8.6 Highardana-horizonSUSEPySAML2 XML external entity attack9.0 Criticalardana-horizonSUSErest-client allows local users to obtain sensitive information by reading the log2.1 Low