openstack-cinder vulnerabilities (SUSE)
152 vulnerabilities.
openstack-cinderSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...5.1 Mediumopenstack-cinderSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable...4.9 Mediumopenstack-cinderSUSEpython-engineio vulnerable to Cross-Site Request Forgery (CSRF)8.8 Highopenstack-cinderSUSEUninitialized read in Nokogiri gem5.3 Mediumopenstack-cinderSUSEAccess control bypass in Apache ZooKeeper5.9 Mediumopenstack-cinderSUSEIn memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru...7.5 Highopenstack-cinderSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...4.9 Mediumopenstack-cinderSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...4.9 Mediumopenstack-cinderSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....4.4 Mediumopenstack-cinderSUSEImproper Certificate Validation in urllib37.5 Highopenstack-cinderSUSEImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 Mediumopenstack-cinderSUSENokogiri vulnerable to libxslt protection mechanism bypass9.8 Criticalopenstack-cinderSUSEJinja2 sandbox escape vulnerability8.6 Highopenstack-cinderSUSEJinja2 sandbox escape via string formatting8.6 Highopenstack-cinderSUSEOpenStack Neutron overlapping security group rules prevents compute node network configuration6.5 Mediumopenstack-cinderSUSEA vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An...6.5 Mediumopenstack-cinderSUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumopenstack-cinderSUSEOpenStack Neutron's unsupported dport option prevents applying security groups6.5 Mediumopenstack-cinderSUSESQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 Criticalopenstack-cinderSUSEAnsible Path Traversal vulnerability4.2 Mediumopenstack-cinderSUSE** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to...9.8 Criticalopenstack-cinderSUSEUncontrolled Memory Consumption in Django7.5 Highopenstack-cinderSUSESQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 Highopenstack-cinderSUSEImproper Input Validation in Django6.5 Mediumopenstack-cinderSUSEAnsible sensitive information disclosure3.1 Lowopenstack-cinderSUSEGrafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary...6.5 Mediumopenstack-cinderSUSEImproper Neutralization of Input During Web Page Generation in LXML6.1 Mediumopenstack-cinderSUSEAnsible Logs Passwords If PowerShell ScriptBlock is Enabled4.2 Mediumopenstack-cinderSUSEAnsible Leaks Data Passed to ssh-keygen7.8 Highopenstack-cinderSUSESecurity update for crowbar-core, crowbar-openstack, grafana, novnc, openstack-keystone, openstack-neutron, openstack-neutron-lbaas, openstack-nova, openstack-tempest, python-pysaml2, python-urllib3,…No scoreopenstack-cinderSUSEGrafana Authentication Bypass9.8 Criticalopenstack-cinderSUSEA vulnerability was found in openstack-cinder releases up to and including Queens, allowing newly...5.1 Mediumopenstack-cinderSUSEDjango open redirect6.1 Mediumopenstack-cinderSUSEIn the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an...5.3 Mediumopenstack-cinderSUSEAnsible Arbitrary Code Execution7.8 Highopenstack-cinderSUSEOpenStack Nova DoS by rebuilding the same instance with a new image multiple times8.6 Highopenstack-cinderSUSEAnsible Arbitrary Code Execution8.0 Highopenstack-cinderSUSEAnsible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems6.6 Mediumopenstack-cinderSUSEAnsible fails to properly sanitize fact variables sent from the Ansible controller7.6 Highopenstack-cinderSUSEAnsible Insertion of Sensitive Information into Log File vulnerability9.8 Criticalopenstack-cinderSUSEImproper Input Validation in ansible2.2 Lowopenstack-cinderSUSEAnsible apt_key module does not properly verify key fingerprint6.3 Mediumopenstack-cinderSUSEOpenStack Horizon Cross-site Scripting (XSS)4.8 Mediumopenstack-cinderSUSEOpenStack Nova logs sensitive context from notification exceptions9.8 Criticalopenstack-cinderSUSEPySAML2 XML external entity attack9.0 Criticalopenstack-cinderSUSEOpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability5.4 Mediumopenstack-cinderSUSEOpenStack Neutron Intended MAC-spoofing protection mechanism bypass8.2 Highopenstack-cinderSUSEOpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism8.2 Highopenstack-cinderSUSEOpenStack Nova host data access through resize/migration5.3 Mediumopenstack-cinderSUSEPillow Buffer overflow in ImagingFliDecode6.5 Medium- Show moreLoading…