openstack-heat vulnerabilities (SUSE)
76 vulnerabilities.
-
openstack-heatSUSE Information leak in api 7.4 High -
openstack-heatSUSE Werkzeug may allow high resource usage when parsing multipart form data with many fields 7.5 High -
openstack-heatSUSE OpenStack Swift XML external entities (XXE) Injection 6.5 Medium -
openstack-heatSUSE Improper Authentication in InfluxDB 9.8 Critical -
openstack-heatSUSE Grafana XSS via a query alias for the ElasticSearch datasource 6.1 Medium -
openstack-heatSUSE CRLF injection in urllib3 6.5 Medium -
openstack-heatSUSE OpenStack Nova Live migration fails to update persistent domain XML 8.3 High -
openstack-heatSUSE Grafana stored XSS 5.4 Medium -
openstack-heatSUSE Out-of-bounds reads in Pillow 5.5 Medium -
openstack-heatSUSE Out-of-bounds reads in Pillow 5.5 Medium -
openstack-heatSUSE Out-of-bounds read in Pillow 5.5 Medium -
openstack-heatSUSE Server Side Request Forgery in Grafana 8.2 High -
openstack-heatSUSE Grafana XSS via adding a link in General feature 6.1 Medium -
openstack-heatSUSE Grafana XSS via a column style 6.1 Medium -
openstack-heatSUSE Grafana XSS in Dashboard Text Panel 6.1 Medium -
openstack-heatSUSE Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible 5.0 Medium -
openstack-heatSUSE Grafana version < 6.7.3 is vulnerable for annotation popup XSS. 6.1 Medium -
openstack-heatSUSE Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File 5.0 Medium -
openstack-heatSUSE OpenStack Manila Unprivileged users can retrieve, use and manipulate share networks 8.3 High -
openstack-heatSUSE HTTP Response Splitting in Puma 6.5 Medium -
openstack-heatSUSE mysql-systemd-helper allows setting 640 permissions of arbitrary files 5.1 Medium -
openstack-heatSUSE crowbar provision leaks admin password to all nodes in cleartext 9.3 Critical -
openstack-heatSUSE libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation 7.5 High -
openstack-heatSUSE Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions... 5.9 Medium -
openstack-heatSUSE Improper Verification of Cryptographic Signature in PySAML2 7.5 High -
openstack-heatSUSE Potential DOS attack in Puma 5.3 Medium -
openstack-heatSUSE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).... 6.5 Medium -
openstack-heatSUSE Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions... 4.4 Medium -
openstack-heatSUSE Haml vulnerable to cross-site scripting 6.1 Medium -
openstack-heatSUSE Security update for ansible1, ardana-ansible, ardana-cluster, ardana-db, ardana-extensions-nsx, ardana-glance, ardana-input-model, ardana-installer-ui, ardana-manila, ardana-monasca, ardana-neutron, a… No score -
openstack-heatSUSE In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This... 7.5 High -
openstack-heatSUSE memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str... 7.5 High -
openstack-heatSUSE Nokogiri Command Injection Vulnerability 9.8 Critical -
openstack-heatSUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser).... 6.5 Medium -
openstack-heatSUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported... 5.5 Medium -
openstack-heatSUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML).... 6.5 Medium -
openstack-heatSUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:... 5.1 Medium -
openstack-heatSUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable... 4.9 Medium -
openstack-heatSUSE python-engineio vulnerable to Cross-Site Request Forgery (CSRF) 8.8 High -
openstack-heatSUSE Uninitialized read in Nokogiri gem 5.3 Medium -
openstack-heatSUSE Access control bypass in Apache ZooKeeper 5.9 Medium -
openstack-heatSUSE In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru... 7.5 High -
openstack-heatSUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported... 4.9 Medium -
openstack-heatSUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:... 4.9 Medium -
openstack-heatSUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).... 4.4 Medium -
openstack-heatSUSE Improper Certificate Validation in urllib3 7.5 High -
openstack-heatSUSE Improper Neutralization of CRLF Sequences in urllib3 library for Python 6.1 Medium -
openstack-heatSUSE Nokogiri vulnerable to libxslt protection mechanism bypass 9.8 Critical -
openstack-heatSUSE Jinja2 sandbox escape vulnerability 8.6 High -
openstack-heatSUSE Jinja2 sandbox escape via string formatting 8.6 High - Show olderLoading…