ardana-swift vulnerabilities (SUSE)
40 vulnerabilities.
ardana-swiftSUSEDjango Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks7.5 Highardana-swiftSUSEPath Traversal in Django4.9 Mediumardana-swiftSUSEPath Traversal in Django7.5 Highardana-swiftSUSEDirectory Traversal in Django5.3 Mediumardana-swiftSUSEDenial of service in Grafana7.5 Highardana-swiftSUSEActiverecord-session_store Vulnerable to Timing Attack5.3 Mediumardana-swiftSUSEWeb Cache Poisoning5.9 Mediumardana-swiftSUSEAuthentication Bypass in Apache Cassandra7.5 Highardana-swiftSUSEOpen default xmlsec1 key-type preference6.5 Mediumardana-swiftSUSESAML XML Signature wrapping6.5 Mediumardana-swiftSUSEpy vulnerable to Regular Expression Denial of Service7.5 Highardana-swiftSUSEGrafana XSS via a query alias for the ElasticSearch datasource6.1 Mediumardana-swiftSUSEGrafana stored XSS5.4 Mediumardana-swiftSUSEIt was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in...4.3 Mediumardana-swiftSUSEServer Side Request Forgery in Grafana8.2 Highardana-swiftSUSEGrafana XSS via adding a link in General feature6.1 Mediumardana-swiftSUSEGrafana XSS via a column style6.1 Mediumardana-swiftSUSEGrafana XSS in Dashboard Text Panel6.1 Mediumardana-swiftSUSEGrafana version < 6.7.3 is vulnerable for annotation popup XSS.6.1 Mediumardana-swiftSUSEIn Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This...7.5 Highardana-swiftSUSEpython-engineio vulnerable to Cross-Site Request Forgery (CSRF)8.8 Highardana-swiftSUSEImproper Certificate Validation in urllib37.5 Highardana-swiftSUSEImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 Mediumardana-swiftSUSENokogiri vulnerable to libxslt protection mechanism bypass9.8 Criticalardana-swiftSUSEOpenStack Neutron overlapping security group rules prevents compute node network configuration6.5 Mediumardana-swiftSUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumardana-swiftSUSEOpenStack Neutron's unsupported dport option prevents applying security groups6.5 Mediumardana-swiftSUSESQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 Criticalardana-swiftSUSEUncontrolled Memory Consumption in Django7.5 Highardana-swiftSUSESQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 Highardana-swiftSUSEImproper Input Validation in Django6.5 Mediumardana-swiftSUSEGrafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary...6.5 Mediumardana-swiftSUSEPyopenssl Incorrect Memory Management5.9 Mediumardana-swiftSUSEPyOpenSSL Use-After-Free vulnerability8.1 Highardana-swiftSUSEDjango open redirect6.1 Mediumardana-swiftSUSEA vulnerability was found in Openstack Glance. No limits are enforced within the Glance image...4.3 Mediumardana-swiftSUSEKibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL...6.1 Mediumardana-swiftSUSEOpenStack Nova DoS by rebuilding the same instance with a new image multiple times8.6 Highardana-swiftSUSENode.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0,...7.5 Highardana-swiftSUSErest-client allows local users to obtain sensitive information by reading the log2.1 Low