openstack-dashboard vulnerabilities (SUSE)
90 vulnerabilities.
-
openstack-dashboardSUSE Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks 7.5 High -
openstack-dashboardSUSE Path Traversal in Django 4.9 Medium -
openstack-dashboardSUSE Path Traversal in Django 7.5 High -
openstack-dashboardSUSE Directory Traversal in Django 5.3 Medium -
openstack-dashboardSUSE Denial of service in Grafana 7.5 High -
openstack-dashboardSUSE Activerecord-session_store Vulnerable to Timing Attack 5.3 Medium -
openstack-dashboardSUSE Web Cache Poisoning 5.9 Medium -
openstack-dashboardSUSE Authentication Bypass in Apache Cassandra 7.5 High -
openstack-dashboardSUSE Django Directory Traversal via archive.extract 5.3 Medium -
openstack-dashboardSUSE Open default xmlsec1 key-type preference 6.5 Medium -
openstack-dashboardSUSE SAML XML Signature wrapping 6.5 Medium -
openstack-dashboardSUSE py vulnerable to Regular Expression Denial of Service 7.5 High -
openstack-dashboardSUSE OpenStack Horizon Open redirect in workflow forms 6.1 Medium -
openstack-dashboardSUSE Grafana XSS via a query alias for the ElasticSearch datasource 6.1 Medium -
openstack-dashboardSUSE Flask-Cors Directory Traversal vulnerability 7.5 High -
openstack-dashboardSUSE OpenStack Nova Live migration fails to update persistent domain XML 8.3 High -
openstack-dashboardSUSE Grafana stored XSS 5.4 Medium -
openstack-dashboardSUSE It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in... 4.3 Medium -
openstack-dashboardSUSE Out-of-bounds reads in Pillow 5.5 Medium -
openstack-dashboardSUSE Out-of-bounds read in Pillow 8.1 High -
openstack-dashboardSUSE Out-of-bounds reads in Pillow 5.5 Medium -
openstack-dashboardSUSE Out-of-bounds read in Pillow 5.5 Medium -
openstack-dashboardSUSE Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names 7.5 High -
openstack-dashboardSUSE Openstack cinder Improper handling of ScaleIO backend credentials 6.5 Medium -
openstack-dashboardSUSE Server Side Request Forgery in Grafana 8.2 High -
openstack-dashboardSUSE XSS in Django 6.1 Medium -
openstack-dashboardSUSE Data leakage via cache key collision in Django 5.9 Medium -
openstack-dashboardSUSE Grafana XSS via adding a link in General feature 6.1 Medium -
openstack-dashboardSUSE Grafana XSS via a column style 6.1 Medium -
openstack-dashboardSUSE Grafana XSS in Dashboard Text Panel 6.1 Medium -
openstack-dashboardSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 6.8 Medium -
openstack-dashboardSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 7.5 High -
openstack-dashboardSUSE Information disclosure issue in Active Resource 7.5 High -
openstack-dashboardSUSE Grafana version < 6.7.3 is vulnerable for annotation popup XSS. 6.1 Medium -
openstack-dashboardSUSE Unsafe object creation in json RubyGem 7.5 High -
openstack-dashboardSUSE SQL injection in Django 8.8 High -
openstack-dashboardSUSE mysql-systemd-helper allows setting 640 permissions of arbitrary files 5.1 Medium -
openstack-dashboardSUSE crowbar provision leaks admin password to all nodes in cleartext 9.3 Critical -
openstack-dashboardSUSE SQL injection in Django 9.8 Critical -
openstack-dashboardSUSE libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation 7.5 High -
openstack-dashboardSUSE Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions... 5.9 Medium -
openstack-dashboardSUSE Improper Verification of Cryptographic Signature in PySAML2 7.5 High -
openstack-dashboardSUSE Uncontrolled Resource Consumption in Pillow 7.5 High -
openstack-dashboardSUSE Buffer Copy without Checking Size of Input in Pillow 9.8 Critical -
openstack-dashboardSUSE PCX P mode buffer overflow in Pillow 9.8 Critical -
openstack-dashboardSUSE Out-of-bounds Read in Pillow 7.1 High -
openstack-dashboardSUSE HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers 7.1 High -
openstack-dashboardSUSE HTTP Request Smuggling: Content-Length Sent Twice in Waitress 7.1 High -
openstack-dashboardSUSE HTTP Request Smuggling: LF vs CRLF handling in Waitress 7.1 High -
openstack-dashboardSUSE HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress 7.1 High - Show olderLoading…