documentation-suse-openstack-cloud-security vulnerabilities (SUSE)

115 vulnerabilities.

• documentation-suse-openstack-cloud-security SUSE An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user... CVE-2021-22141 6.1 MediumNovember 19, 2021
• documentation-suse-openstack-cloud-security SUSE Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma CVE-2021-41136 Fix available 3.7 LowOctober 12, 2021
• documentation-suse-openstack-cloud-security SUSE OpenStack Keystone allows information disclosure during account locking CVE-2021-38155 Fix available 7.5 HighAugust 6, 2021
• documentation-suse-openstack-cloud-security SUSE Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks CVE-2021-33571 Fix available 7.5 HighJune 2, 2021
• documentation-suse-openstack-cloud-security SUSE Path Traversal in Django CVE-2021-33203 Fix available 4.9 MediumJune 2, 2021
• documentation-suse-openstack-cloud-security SUSE Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet CVE-2021-21419 Fix available 5.3 MediumMay 7, 2021
• documentation-suse-openstack-cloud-security SUSE Path Traversal in Django CVE-2021-31542 Fix available 7.5 HighMay 4, 2021
• documentation-suse-openstack-cloud-security SUSE Directory Traversal in Django CVE-2021-28658 Fix available 5.3 MediumApril 6, 2021
• documentation-suse-openstack-cloud-security SUSE Denial of service in Grafana CVE-2021-27358 Fix available EPSS 83.0% 7.5 HighMarch 18, 2021
• documentation-suse-openstack-cloud-security SUSE Activerecord-session_store Vulnerable to Timing Attack CVE-2019-25025 Fix available 5.3 MediumMarch 5, 2021
• documentation-suse-openstack-cloud-security SUSE Web Cache Poisoning CVE-2021-23336 Fix available EPSS 40.7% 5.9 MediumFebruary 15, 2021
• documentation-suse-openstack-cloud-security SUSE Authentication Bypass in Apache Cassandra CVE-2020-17516 Fix available 7.5 HighFebruary 3, 2021
• documentation-suse-openstack-cloud-security SUSE Open default xmlsec1 key-type preference CVE-2021-21239 Public exploitFix available 6.5 MediumJanuary 21, 2021
• documentation-suse-openstack-cloud-security SUSE SAML XML Signature wrapping CVE-2021-21238 Fix available 6.5 MediumJanuary 21, 2021
• documentation-suse-openstack-cloud-security SUSE Injection in Redcarpet CVE-2020-26298 Fix available 6.8 MediumJanuary 11, 2021
• documentation-suse-openstack-cloud-security SUSE XXE in Nokogiri CVE-2020-26247 Fix available 2.6 LowDecember 30, 2020
• documentation-suse-openstack-cloud-security SUSE py vulnerable to Regular Expression Denial of Service CVE-2020-29651 Fix available 7.5 HighDecember 9, 2020
• documentation-suse-openstack-cloud-security SUSE Insufficiently random values in Ansible CVE-2020-10729 Fix available 5.5 MediumNovember 12, 2020
• documentation-suse-openstack-cloud-security SUSE CRLF injection in urllib3 CVE-2020-26137 Fix available 6.5 MediumSeptember 29, 2020
• documentation-suse-openstack-cloud-security SUSE Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible CVE-2020-14332 Fix available 5.5 MediumSeptember 11, 2020
• documentation-suse-openstack-cloud-security SUSE Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible CVE-2020-14330 Fix available 5.0 MediumSeptember 11, 2020
• documentation-suse-openstack-cloud-security SUSE Improper Verification of Cryptographic Signature in ansible CVE-2020-14365 Fix available 7.1 HighSeptember 5, 2020
• documentation-suse-openstack-cloud-security SUSE Flask-Cors Directory Traversal vulnerability CVE-2020-25032 Fix available 7.5 HighAugust 31, 2020
• documentation-suse-openstack-cloud-security SUSE OpenStack Nova Live migration fails to update persistent domain XML CVE-2020-17376 Fix available 8.3 HighAugust 26, 2020
• documentation-suse-openstack-cloud-security SUSE Grafana stored XSS CVE-2020-11110 Public exploitFix available 5.4 MediumJuly 27, 2020
• documentation-suse-openstack-cloud-security SUSE It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in... CVE-2020-10743 4.3 MediumJuly 14, 2020
• documentation-suse-openstack-cloud-security SUSE Out-of-bounds reads in Pillow CVE-2020-10177 Fix available 5.5 MediumJune 25, 2020
• documentation-suse-openstack-cloud-security SUSE Out-of-bounds reads in Pillow CVE-2020-10994 Fix available 5.5 MediumJune 25, 2020
• documentation-suse-openstack-cloud-security SUSE Out-of-bounds read in Pillow CVE-2020-10378 Fix available 5.5 MediumJune 25, 2020
• documentation-suse-openstack-cloud-security SUSE Server Side Request Forgery in Grafana CVE-2020-13379 Public exploitFix available EPSS 99.9% 8.2 HighJune 3, 2020
• documentation-suse-openstack-cloud-security SUSE XSS in Django CVE-2020-13596 Fix available 6.1 MediumJune 3, 2020
• documentation-suse-openstack-cloud-security SUSE Data leakage via cache key collision in Django CVE-2020-13254 Public exploitFix available 5.9 MediumJune 3, 2020
• documentation-suse-openstack-cloud-security SUSE Grafana XSS via adding a link in General feature CVE-2018-18625 Fix available 6.1 MediumJune 2, 2020
• documentation-suse-openstack-cloud-security SUSE Grafana XSS via a column style CVE-2018-18624 Fix available 6.1 MediumJune 2, 2020
• documentation-suse-openstack-cloud-security SUSE Grafana XSS in Dashboard Text Panel CVE-2018-18623 Fix available 6.1 MediumJune 2, 2020
• documentation-suse-openstack-cloud-security SUSE HTTP Smuggling via Transfer-Encoding Header in Puma CVE-2020-11077 Fix available 6.8 MediumMay 22, 2020
• documentation-suse-openstack-cloud-security SUSE HTTP Smuggling via Transfer-Encoding Header in Puma CVE-2020-11076 Public exploitFix available 7.5 HighMay 22, 2020
• documentation-suse-openstack-cloud-security SUSE Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible CVE-2020-10744 Fix available 5.0 MediumMay 15, 2020
• documentation-suse-openstack-cloud-security SUSE Exposure of Sensitive Information to an Unauthorized Actor in ansible CVE-2020-1746 Fix available 5.0 MediumMay 12, 2020
• documentation-suse-openstack-cloud-security SUSE Information disclosure issue in Active Resource CVE-2020-8151 Fix available 7.5 HighMay 12, 2020
• documentation-suse-openstack-cloud-security SUSE Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible CVE-2020-10685 Fix available 5.0 MediumMay 11, 2020
• documentation-suse-openstack-cloud-security SUSE Path Traversal in Ansible CVE-2020-10691 Fix available 5.2 MediumApril 30, 2020
• documentation-suse-openstack-cloud-security SUSE Grafana version < 6.7.3 is vulnerable for annotation popup XSS. CVE-2020-12052 Fix available 6.1 MediumApril 27, 2020
• documentation-suse-openstack-cloud-security SUSE Unsafe object creation in json RubyGem CVE-2020-10663 Public exploitFix available 7.5 HighApril 15, 2020
• documentation-suse-openstack-cloud-security SUSE Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible CVE-2020-10684 Fix available 7.9 HighMarch 24, 2020
• documentation-suse-openstack-cloud-security SUSE Argument Injection in Ansible CVE-2020-1738 Fix available 3.9 LowMarch 16, 2020
• documentation-suse-openstack-cloud-security SUSE Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible CVE-2020-1740 Fix available 3.9 LowMarch 16, 2020
• documentation-suse-openstack-cloud-security SUSE Path Traversal in Ansible CVE-2020-1735 Fix available 4.2 MediumMarch 16, 2020
• documentation-suse-openstack-cloud-security SUSE Incorrect Permission Assignment for Critical Resource in Ansible CVE-2020-1736 Fix available 2.2 LowMarch 16, 2020
• documentation-suse-openstack-cloud-security SUSE Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible CVE-2020-1753 Fix available 5.0 MediumMarch 16, 2020
• Show olderLoading…