hawk2 vulnerabilities (SUSE)
14 vulnerabilities.
-
hawk2SUSE Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams 8.7 High -
hawk2SUSE Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing 9.5 Critical -
hawk2SUSE rails-html-sanitizer: Possible XSS vulnerability with certain configurations 5.1 Medium -
hawk2SUSE Loofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolons 2.3 Low -
hawk2SUSE Loofah: SVG `href` attribute bypasses local-reference restriction 4.7 Medium -
hawk2SUSE Loofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character references 2.3 Low -
hawk2SUSE Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing 7.5 High -
hawk2SUSE Active Record logging vulnerable to ANSI escape injection 2.7 Low -
hawk2SUSE net-imap vulnerable to STARTTLS stripping via invalid response timing 7.6 High -
hawk2SUSE Security update for hawk2 No score -
hawk2SUSE hawk: Insecure file permissions 7.8 High -
hawk2SUSE An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code... 9.8 Critical -
hawk2SUSE ClusterLabs crmsh vulnerable to shell code injection 7.8 High -
hawk2SUSE Security update for hawk2 No score