openstack-cinder-doc vulnerabilities (SUSE)
98 vulnerabilities.
openstack-cinder-docSUSEIn Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This...7.5 Highopenstack-cinder-docSUSENokogiri Command Injection Vulnerability9.8 Criticalopenstack-cinder-docSUSEDeserialization of Untrusted Data in Apache Storm9.8 Criticalopenstack-cinder-docSUSEExposure of Sensitive Information in Apache Storm Logviewer7.5 Highopenstack-cinder-docSUSEExposure of Sensitive Information to an Unauthorized Actor in ansible4.6 Mediumopenstack-cinder-docSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....6.5 Mediumopenstack-cinder-docSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...5.5 Mediumopenstack-cinder-docSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML)....6.5 Mediumopenstack-cinder-docSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...5.1 Mediumopenstack-cinder-docSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable...4.9 Mediumopenstack-cinder-docSUSEpython-engineio vulnerable to Cross-Site Request Forgery (CSRF)8.8 Highopenstack-cinder-docSUSEUninitialized read in Nokogiri gem5.3 Mediumopenstack-cinder-docSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...4.9 Mediumopenstack-cinder-docSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...4.9 Mediumopenstack-cinder-docSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....4.4 Mediumopenstack-cinder-docSUSENokogiri vulnerable to libxslt protection mechanism bypass9.8 Criticalopenstack-cinder-docSUSEOpenStack Neutron overlapping security group rules prevents compute node network configuration6.5 Mediumopenstack-cinder-docSUSEOpenStack Neutron's unsupported dport option prevents applying security groups6.5 Mediumopenstack-cinder-docSUSEAnsible Path Traversal vulnerability4.2 Mediumopenstack-cinder-docSUSEUncontrolled Memory Consumption in Django7.5 Highopenstack-cinder-docSUSEImproper Input Validation in Django6.5 Mediumopenstack-cinder-docSUSEAnsible sensitive information disclosure3.1 Lowopenstack-cinder-docSUSEGrafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary...6.5 Mediumopenstack-cinder-docSUSEAnsible Logs Passwords If PowerShell ScriptBlock is Enabled4.2 Mediumopenstack-cinder-docSUSEAnsible Leaks Data Passed to ssh-keygen7.8 Highopenstack-cinder-docSUSESecurity update for crowbar-core, crowbar-openstack, grafana, novnc, openstack-keystone, openstack-neutron, openstack-neutron-lbaas, openstack-nova, openstack-tempest, python-pysaml2, python-urllib3,…No scoreopenstack-cinder-docSUSEGrafana Authentication Bypass9.8 Criticalopenstack-cinder-docSUSEA vulnerability was found in openstack-cinder releases up to and including Queens, allowing newly...5.1 Mediumopenstack-cinder-docSUSEDjango open redirect6.1 Mediumopenstack-cinder-docSUSEIn the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an...5.3 Mediumopenstack-cinder-docSUSEAnsible Arbitrary Code Execution7.8 Highopenstack-cinder-docSUSEOpenStack Nova DoS by rebuilding the same instance with a new image multiple times8.6 Highopenstack-cinder-docSUSEAnsible Arbitrary Code Execution8.0 Highopenstack-cinder-docSUSEAnsible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems6.6 Mediumopenstack-cinder-docSUSEAnsible fails to properly sanitize fact variables sent from the Ansible controller7.6 Highopenstack-cinder-docSUSEAnsible Insertion of Sensitive Information into Log File vulnerability9.8 Criticalopenstack-cinder-docSUSEImproper Input Validation in ansible2.2 Lowopenstack-cinder-docSUSEAnsible apt_key module does not properly verify key fingerprint6.3 Mediumopenstack-cinder-docSUSEOpenStack Horizon Cross-site Scripting (XSS)4.8 Mediumopenstack-cinder-docSUSEOpenStack Nova logs sensitive context from notification exceptions9.8 Criticalopenstack-cinder-docSUSEPySAML2 XML external entity attack9.0 Criticalopenstack-cinder-docSUSEOpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability5.4 Mediumopenstack-cinder-docSUSEOpenStack Neutron Intended MAC-spoofing protection mechanism bypass8.2 Highopenstack-cinder-docSUSEOpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism8.2 Highopenstack-cinder-docSUSEOpenStack Nova host data access through resize/migration5.3 Mediumopenstack-cinder-docSUSEPillow Buffer overflow in ImagingFliDecode6.5 Mediumopenstack-cinder-docSUSErest-client allows local users to obtain sensitive information by reading the log2.1 Lowopenstack-cinder-docSUSEOpenStack Glance Denial of service by creating a large number of images4.0 Medium