ardana-nova vulnerabilities (SUSE)
96 vulnerabilities.
ardana-novaSUSEIn Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This...7.5 Highardana-novaSUSENokogiri Command Injection Vulnerability9.8 Criticalardana-novaSUSEDeserialization of Untrusted Data in Apache Storm9.8 Criticalardana-novaSUSEExposure of Sensitive Information in Apache Storm Logviewer7.5 Highardana-novaSUSEExposure of Sensitive Information to an Unauthorized Actor in ansible4.6 Mediumardana-novaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....6.5 Mediumardana-novaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...5.5 Mediumardana-novaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML)....6.5 Mediumardana-novaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...5.1 Mediumardana-novaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable...4.9 Mediumardana-novaSUSEpython-engineio vulnerable to Cross-Site Request Forgery (CSRF)8.8 Highardana-novaSUSEUninitialized read in Nokogiri gem5.3 Mediumardana-novaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...4.9 Mediumardana-novaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...4.9 Mediumardana-novaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....4.4 Mediumardana-novaSUSEImproper Certificate Validation in urllib37.5 Highardana-novaSUSEImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 Mediumardana-novaSUSENokogiri vulnerable to libxslt protection mechanism bypass9.8 Criticalardana-novaSUSEOpenStack Neutron overlapping security group rules prevents compute node network configuration6.5 Mediumardana-novaSUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumardana-novaSUSEOpenStack Neutron's unsupported dport option prevents applying security groups6.5 Mediumardana-novaSUSESQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 Criticalardana-novaSUSEAnsible Path Traversal vulnerability4.2 Mediumardana-novaSUSEUncontrolled Memory Consumption in Django7.5 Highardana-novaSUSESQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 Highardana-novaSUSEImproper Input Validation in Django6.5 Mediumardana-novaSUSEAnsible sensitive information disclosure3.1 Lowardana-novaSUSEGrafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary...6.5 Mediumardana-novaSUSEAnsible Logs Passwords If PowerShell ScriptBlock is Enabled4.2 Mediumardana-novaSUSEAnsible Leaks Data Passed to ssh-keygen7.8 Highardana-novaSUSEPyopenssl Incorrect Memory Management5.9 Mediumardana-novaSUSEPyOpenSSL Use-After-Free vulnerability8.1 Highardana-novaSUSESecurity update for crowbar-core, crowbar-openstack, grafana, novnc, openstack-keystone, openstack-neutron, openstack-neutron-lbaas, openstack-nova, openstack-tempest, python-pysaml2, python-urllib3,…No scoreardana-novaSUSEGrafana Authentication Bypass9.8 Criticalardana-novaSUSEDjango open redirect6.1 Mediumardana-novaSUSEA vulnerability was found in Openstack Glance. No limits are enforced within the Glance image...4.3 Mediumardana-novaSUSEAnsible Arbitrary Code Execution7.8 Highardana-novaSUSEOpenStack Nova DoS by rebuilding the same instance with a new image multiple times8.6 Highardana-novaSUSEAnsible Arbitrary Code Execution8.0 Highardana-novaSUSEAnsible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems6.6 Mediumardana-novaSUSEAnsible fails to properly sanitize fact variables sent from the Ansible controller7.6 Highardana-novaSUSEAnsible Insertion of Sensitive Information into Log File vulnerability9.8 Criticalardana-novaSUSEImproper Input Validation in ansible2.2 Lowardana-novaSUSEAnsible apt_key module does not properly verify key fingerprint6.3 Mediumardana-novaSUSEPySAML2 XML external entity attack9.0 Criticalardana-novaSUSErest-client allows local users to obtain sensitive information by reading the log2.1 Low