crowbar-ha vulnerabilities (SUSE)
79 vulnerabilities.
-
crowbar-haSUSE Django Directory Traversal via archive.extract 5.3 Medium -
crowbar-haSUSE It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in... 4.3 Medium -
crowbar-haSUSE Server Side Request Forgery in Grafana 8.2 High -
crowbar-haSUSE XSS in Django 6.1 Medium -
crowbar-haSUSE Data leakage via cache key collision in Django 5.9 Medium -
crowbar-haSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 6.8 Medium -
crowbar-haSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 7.5 High -
crowbar-haSUSE Information disclosure issue in Active Resource 7.5 High -
crowbar-haSUSE Grafana version < 6.7.3 is vulnerable for annotation popup XSS. 6.1 Medium -
crowbar-haSUSE Unsafe object creation in json RubyGem 7.5 High -
crowbar-haSUSE OpenStack Manila Unprivileged users can retrieve, use and manipulate share networks 8.3 High -
crowbar-haSUSE HTTP Response Splitting in Puma 6.5 Medium -
crowbar-haSUSE mysql-systemd-helper allows setting 640 permissions of arbitrary files 5.1 Medium -
crowbar-haSUSE crowbar provision leaks admin password to all nodes in cleartext 9.3 Critical -
crowbar-haSUSE libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation 7.5 High -
crowbar-haSUSE Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions... 5.9 Medium -
crowbar-haSUSE Improper Verification of Cryptographic Signature in PySAML2 7.5 High -
crowbar-haSUSE Uncontrolled Resource Consumption in Pillow 7.5 High -
crowbar-haSUSE PCX P mode buffer overflow in Pillow 9.8 Critical -
crowbar-haSUSE Out-of-bounds Read in Pillow 7.1 High -
crowbar-haSUSE HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers 7.1 High -
crowbar-haSUSE HTTP Request Smuggling: Content-Length Sent Twice in Waitress 7.1 High -
crowbar-haSUSE HTTP Request Smuggling: LF vs CRLF handling in Waitress 7.1 High -
crowbar-haSUSE HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress 7.1 High -
crowbar-haSUSE Django Potential account hijack via password reset form 9.8 Critical -
crowbar-haSUSE Potential DOS attack in Puma 5.3 Medium -
crowbar-haSUSE Double Free in psutil 7.5 High -
crowbar-haSUSE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).... 6.5 Medium -
crowbar-haSUSE Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions... 4.4 Medium -
crowbar-haSUSE Haml vulnerable to cross-site scripting 6.1 Medium -
crowbar-haSUSE DOS attack in Pillow when processing specially crafted image files 7.5 High -
crowbar-haSUSE Security update for ansible1, ardana-ansible, ardana-cluster, ardana-db, ardana-extensions-nsx, ardana-glance, ardana-input-model, ardana-installer-ui, ardana-manila, ardana-monasca, ardana-neutron, a… No score -
crowbar-haSUSE In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This... 7.5 High -
crowbar-haSUSE memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str... 7.5 High -
crowbar-haSUSE Nokogiri Command Injection Vulnerability 9.8 Critical -
crowbar-haSUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser).... 6.5 Medium -
crowbar-haSUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported... 5.5 Medium -
crowbar-haSUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML).... 6.5 Medium -
crowbar-haSUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:... 5.1 Medium -
crowbar-haSUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable... 4.9 Medium -
crowbar-haSUSE python-engineio vulnerable to Cross-Site Request Forgery (CSRF) 8.8 High -
crowbar-haSUSE Uninitialized read in Nokogiri gem 5.3 Medium -
crowbar-haSUSE Access control bypass in Apache ZooKeeper 5.9 Medium -
crowbar-haSUSE In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru... 7.5 High -
crowbar-haSUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported... 4.9 Medium -
crowbar-haSUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:... 4.9 Medium -
crowbar-haSUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).... 4.4 Medium -
crowbar-haSUSE Improper Certificate Validation in urllib3 7.5 High -
crowbar-haSUSE Improper Neutralization of CRLF Sequences in urllib3 library for Python 6.1 Medium -
crowbar-haSUSE Nokogiri vulnerable to libxslt protection mechanism bypass 9.8 Critical - Show olderLoading…