ardana-monasca vulnerabilities (SUSE)
70 vulnerabilities.
ardana-monascaSUSEAn open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user...6.1 Mediumardana-monascaSUSEInconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma3.7 Lowardana-monascaSUSEImproper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet5.3 Mediumardana-monascaSUSEDjango Directory Traversal via archive.extract5.3 Mediumardana-monascaSUSEInjection in Redcarpet6.8 Mediumardana-monascaSUSEIt was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in...4.3 Mediumardana-monascaSUSEOut-of-bounds reads in Pillow5.5 Mediumardana-monascaSUSEOut-of-bounds read in Pillow8.1 Highardana-monascaSUSEOut-of-bounds reads in Pillow5.5 Mediumardana-monascaSUSEOut-of-bounds read in Pillow5.5 Mediumardana-monascaSUSERack allows Percent-encoded cookies to overwrite existing prefixed cookie names7.5 Highardana-monascaSUSEOpenstack cinder Improper handling of ScaleIO backend credentials6.5 Mediumardana-monascaSUSEServer Side Request Forgery in Grafana8.2 Highardana-monascaSUSEXSS in Django6.1 Mediumardana-monascaSUSEData leakage via cache key collision in Django5.9 Mediumardana-monascaSUSEGrafana version < 6.7.3 is vulnerable for annotation popup XSS.6.1 Mediumardana-monascaSUSEOpenStack Manila Unprivileged users can retrieve, use and manipulate share networks8.3 Highardana-monascaSUSESQL injection in Django8.8 Highardana-monascaSUSEHTTP Response Splitting in Puma6.5 Mediumardana-monascaSUSEmysql-systemd-helper allows setting 640 permissions of arbitrary files5.1 Mediumardana-monascaSUSEcrowbar provision leaks admin password to all nodes in cleartext9.3 Criticalardana-monascaSUSESQL injection in Django9.8 Criticalardana-monascaSUSElibxml as used in Nokogiri has an infinite loop in a certain end-of-file situation7.5 Highardana-monascaSUSEVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...5.9 Mediumardana-monascaSUSEUncontrolled Resource Consumption in Pillow7.5 Highardana-monascaSUSEBuffer Copy without Checking Size of Input in Pillow9.8 Criticalardana-monascaSUSEPCX P mode buffer overflow in Pillow9.8 Criticalardana-monascaSUSEOut-of-bounds Read in Pillow7.1 Highardana-monascaSUSEHTTP Request Smuggling in Waitress: Invalid whitespace characters in headers7.1 Highardana-monascaSUSEHTTP Request Smuggling: Content-Length Sent Twice in Waitress7.1 Highardana-monascaSUSEHTTP Request Smuggling: LF vs CRLF handling in Waitress7.1 Highardana-monascaSUSEHTTP Request Smuggling: Invalid Transfer-Encoding in Waitress7.1 Highardana-monascaSUSEDjango Potential account hijack via password reset form9.8 Criticalardana-monascaSUSEPotential DOS attack in Puma5.3 Mediumardana-monascaSUSEVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....6.5 Mediumardana-monascaSUSEVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...4.4 Mediumardana-monascaSUSEHaml vulnerable to cross-site scripting6.1 Mediumardana-monascaSUSEDOS attack in Pillow when processing specially crafted image files7.5 Highardana-monascaSUSESecurity update for ansible1, ardana-ansible, ardana-cluster, ardana-db, ardana-extensions-nsx, ardana-glance, ardana-input-model, ardana-installer-ui, ardana-manila, ardana-monasca, ardana-neutron, a…No scoreardana-monascaSUSEmemcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str...7.5 Highardana-monascaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....6.5 Mediumardana-monascaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...5.5 Mediumardana-monascaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML)....6.5 Mediumardana-monascaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...5.1 Mediumardana-monascaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable...4.9 Mediumardana-monascaSUSEpython-engineio vulnerable to Cross-Site Request Forgery (CSRF)8.8 Highardana-monascaSUSEUninitialized read in Nokogiri gem5.3 Mediumardana-monascaSUSEAccess control bypass in Apache ZooKeeper5.9 Mediumardana-monascaSUSEIn memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru...7.5 Highardana-monascaSUSEImproper Certificate Validation in urllib37.5 High- Show olderLoading…