cassandra vulnerabilities (SUSE)

26 vulnerabilities.

• cassandra SUSE Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks CVE-2021-33571 Fix available 7.5 HighJune 2, 2021
• cassandra SUSE Path Traversal in Django CVE-2021-33203 Fix available 4.9 MediumJune 2, 2021
• cassandra SUSE Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet CVE-2021-21419 Fix available 5.3 MediumMay 7, 2021
• cassandra SUSE Path Traversal in Django CVE-2021-31542 Fix available 7.5 HighMay 4, 2021
• cassandra SUSE Directory Traversal in Django CVE-2021-28658 Fix available 5.3 MediumApril 6, 2021
• cassandra SUSE Denial of service in Grafana CVE-2021-27358 Fix available EPSS 83.0% 7.5 HighMarch 18, 2021
• cassandra SUSE Activerecord-session_store Vulnerable to Timing Attack CVE-2019-25025 Fix available 5.3 MediumMarch 5, 2021
• cassandra SUSE Web Cache Poisoning CVE-2021-23336 Fix available EPSS 40.7% 5.9 MediumFebruary 15, 2021
• cassandra SUSE Authentication Bypass in Apache Cassandra CVE-2020-17516 Fix available 7.5 HighFebruary 3, 2021
• cassandra SUSE Open default xmlsec1 key-type preference CVE-2021-21239 Public exploitFix available 6.5 MediumJanuary 21, 2021
• cassandra SUSE SAML XML Signature wrapping CVE-2021-21238 Fix available 6.5 MediumJanuary 21, 2021
• cassandra SUSE XXE in Nokogiri CVE-2020-26247 Fix available 2.6 LowDecember 30, 2020
• cassandra SUSE py vulnerable to Regular Expression Denial of Service CVE-2020-29651 Fix available 7.5 HighDecember 9, 2020
• cassandra SUSE Grafana XSS via a query alias for the ElasticSearch datasource CVE-2020-24303 Fix available 6.1 MediumOctober 28, 2020
• cassandra SUSE Grafana stored XSS CVE-2020-11110 Public exploitFix available 5.4 MediumJuly 27, 2020
• cassandra SUSE It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in... CVE-2020-10743 4.3 MediumJuly 14, 2020
• cassandra SUSE Server Side Request Forgery in Grafana CVE-2020-13379 Public exploitFix available EPSS 99.9% 8.2 HighJune 3, 2020
• cassandra SUSE Grafana XSS via adding a link in General feature CVE-2018-18625 Fix available 6.1 MediumJune 2, 2020
• cassandra SUSE Grafana XSS via a column style CVE-2018-18624 Fix available 6.1 MediumJune 2, 2020
• cassandra SUSE Grafana XSS in Dashboard Text Panel CVE-2018-18623 Fix available 6.1 MediumJune 2, 2020
• cassandra SUSE Grafana version < 6.7.3 is vulnerable for annotation popup XSS. CVE-2020-12052 Fix available 6.1 MediumApril 27, 2020
• cassandra SUSE In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This... CVE-2019-15043 Public exploitFix available EPSS 63.4% 7.5 HighSeptember 3, 2019
• cassandra SUSE Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary... CVE-2018-19039 Fix available 6.5 MediumDecember 13, 2018
• cassandra SUSE Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL... CVE-2017-11481 6.1 MediumDecember 8, 2017
• cassandra SUSE Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0,... CVE-2017-11499 Public exploitFix available 7.5 HighJuly 25, 2017
• cassandra SUSE QOS.ch Logback vulnerable to Deserialization of Untrusted Data CVE-2017-5929 Fix available 9.8 CriticalMarch 13, 2017