openstack-barbican vulnerabilities (SUSE)
63 vulnerabilities.
-
openstack-barbicanSUSE A flaw was found in the openstack-barbican component. This issue allows an access policy bypass... 5.9 Medium -
openstack-barbicanSUSE Apache Spark shell command injection vulnerability via Spark UI 8.8 High -
openstack-barbicanSUSE sinatra does not validate expanded path matches 7.5 High -
openstack-barbicanSUSE openstack-barbican Denial of Service vulnerability 4.9 Medium -
openstack-barbicanSUSE Barbican authorization flaw before v14.0.0 8.1 High -
openstack-barbicanSUSE Arbitrary expression injection in Pillow 9.8 Critical -
openstack-barbicanSUSE Out-of-bounds Read in Pillow 6.5 Medium -
openstack-barbicanSUSE Improper Initialization in Pillow 6.5 Medium -
openstack-barbicanSUSE golang.org/x/net/http2 allows uncontrolled memory consumption 7.5 High -
openstack-barbicanSUSE HTML Cleaner allows crafted and SVG embedded scripts to pass through 8.2 High -
openstack-barbicanSUSE Directory Traversal in Grafana 4.3 Medium -
openstack-barbicanSUSE XSS in the `of` option of the `.position()` util 6.5 Medium -
openstack-barbicanSUSE XSS in `*Text` options of the Datepicker widget 6.5 Medium -
openstack-barbicanSUSE XSS in the `altField` option of the Datepicker widget 6.5 Medium -
openstack-barbicanSUSE OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value 6.5 Medium -
openstack-barbicanSUSE OpenStack Keystone allows information disclosure during account locking 7.5 High -
openstack-barbicanSUSE lxml vulnerable to Cross-Site Scripting 6.1 Medium -
openstack-barbicanSUSE lxml vulnerable to Cross-site Scripting 6.1 Medium -
openstack-barbicanSUSE OpenStack Nova Live migration fails to update persistent domain XML 8.3 High -
openstack-barbicanSUSE Grafana stored XSS 5.4 Medium -
openstack-barbicanSUSE It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in... 4.3 Medium -
openstack-barbicanSUSE Out-of-bounds reads in Pillow 5.5 Medium -
openstack-barbicanSUSE Out-of-bounds read in Pillow 8.1 High -
openstack-barbicanSUSE Out-of-bounds reads in Pillow 5.5 Medium -
openstack-barbicanSUSE Out-of-bounds read in Pillow 5.5 Medium -
openstack-barbicanSUSE Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names 7.5 High -
openstack-barbicanSUSE Openstack cinder Improper handling of ScaleIO backend credentials 6.5 Medium -
openstack-barbicanSUSE Server Side Request Forgery in Grafana 8.2 High -
openstack-barbicanSUSE XSS in Django 6.1 Medium -
openstack-barbicanSUSE Data leakage via cache key collision in Django 5.9 Medium -
openstack-barbicanSUSE Grafana XSS via adding a link in General feature 6.1 Medium -
openstack-barbicanSUSE Grafana XSS via a column style 6.1 Medium -
openstack-barbicanSUSE Grafana XSS in Dashboard Text Panel 6.1 Medium -
openstack-barbicanSUSE Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible 5.0 Medium -
openstack-barbicanSUSE Grafana version < 6.7.3 is vulnerable for annotation popup XSS. 6.1 Medium -
openstack-barbicanSUSE Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File 5.0 Medium -
openstack-barbicanSUSE SQL injection in Django 8.8 High -
openstack-barbicanSUSE crowbar provision leaks admin password to all nodes in cleartext 9.3 Critical -
openstack-barbicanSUSE SQL injection in Django 9.8 Critical -
openstack-barbicanSUSE Uncontrolled Resource Consumption in Pillow 7.5 High -
openstack-barbicanSUSE Buffer Copy without Checking Size of Input in Pillow 9.8 Critical -
openstack-barbicanSUSE PCX P mode buffer overflow in Pillow 9.8 Critical -
openstack-barbicanSUSE Out-of-bounds Read in Pillow 7.1 High -
openstack-barbicanSUSE HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers 7.1 High -
openstack-barbicanSUSE HTTP Request Smuggling: Content-Length Sent Twice in Waitress 7.1 High -
openstack-barbicanSUSE HTTP Request Smuggling: LF vs CRLF handling in Waitress 7.1 High -
openstack-barbicanSUSE HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress 7.1 High -
openstack-barbicanSUSE Django Potential account hijack via password reset form 9.8 Critical -
openstack-barbicanSUSE Potential DOS attack in Puma 5.3 Medium -
openstack-barbicanSUSE Double Free in psutil 7.5 High - Show olderLoading…