openstack-glance-doc vulnerabilities (SUSE)

24 vulnerabilities.

• openstack-glance-doc SUSE In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This... CVE-2019-15043 Public exploitFix available EPSS 63.4% 7.5 HighSeptember 3, 2019
• openstack-glance-doc SUSE Nokogiri Command Injection Vulnerability CVE-2019-5477 Fix available 9.8 CriticalAugust 16, 2019
• openstack-glance-doc SUSE python-engineio vulnerable to Cross-Site Request Forgery (CSRF) CVE-2019-13611 Fix available 8.8 HighJuly 15, 2019
• openstack-glance-doc SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported... CVE-2019-2628 Fix available 4.9 MediumApril 23, 2019
• openstack-glance-doc SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:... CVE-2019-2627 Fix available 4.9 MediumApril 23, 2019
• openstack-glance-doc SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).... CVE-2019-2614 Fix available 4.4 MediumApril 23, 2019
• openstack-glance-doc SUSE OpenStack Neutron's unsupported dport option prevents applying security groups CVE-2019-9735 Fix available 6.5 MediumMarch 12, 2019
• openstack-glance-doc SUSE Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary... CVE-2018-19039 Fix available 6.5 MediumDecember 13, 2018
• openstack-glance-doc SUSE Security update for crowbar-core, crowbar-openstack, grafana, novnc, openstack-keystone, openstack-neutron, openstack-neutron-lbaas, openstack-nova, openstack-tempest, python-pysaml2, python-urllib3,… CVE-2018-558213 Rejected No scoreAugust 29, 2018
• openstack-glance-doc SUSE Grafana Authentication Bypass CVE-2018-15727 Public exploitFix available EPSS 63.1% 9.8 CriticalAugust 29, 2018
• openstack-glance-doc SUSE In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an... CVE-2018-14432 Fix available 5.3 MediumJuly 31, 2018
• openstack-glance-doc SUSE OpenStack Nova DoS by rebuilding the same instance with a new image multiple times CVE-2017-17051 Fix available 8.6 HighDecember 5, 2017
• openstack-glance-doc SUSE Security update for openstack-glance SUSE-SU-2017:2628-1 Fix available No scoreOctober 2, 2017
• openstack-glance-doc SUSE OpenStack Horizon Cross-site Scripting (XSS) CVE-2017-7400 Fix available 4.8 MediumApril 3, 2017
• openstack-glance-doc SUSE OpenStack Nova logs sensitive context from notification exceptions CVE-2017-7214 Fix available 9.8 CriticalMarch 21, 2017
• openstack-glance-doc SUSE PySAML2 XML external entity attack CVE-2016-10127 Fix available 9.0 CriticalFebruary 27, 2017
• openstack-glance-doc SUSE OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability CVE-2016-4428 Fix available 5.4 MediumJune 18, 2016
• openstack-glance-doc SUSE OpenStack Neutron Intended MAC-spoofing protection mechanism bypass CVE-2016-5363 Fix available 8.2 HighJune 17, 2016
• openstack-glance-doc SUSE OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism CVE-2016-5362 Fix available 8.2 HighJune 17, 2016
• openstack-glance-doc SUSE OpenStack Nova host data access through resize/migration CVE-2016-2140 Fix available 5.3 MediumApril 12, 2016
• openstack-glance-doc SUSE OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service CVE-2015-5286 Fix available 6.8 MediumOctober 26, 2015
• openstack-glance-doc SUSE OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions CVE-2015-5251 Fix available 5.5 MediumSeptember 22, 2015
• openstack-glance-doc SUSE rest-client allows local users to obtain sensitive information by reading the log CVE-2015-3448 Fix available 2.1 LowApril 29, 2015
• openstack-glance-doc SUSE OpenStack Glance Denial of service by creating a large number of images CVE-2014-9684 Fix available 4.0 MediumFebruary 24, 2015