openstack-heat-doc vulnerabilities (SUSE)

57 vulnerabilities.

• openstack-heat-doc SUSE Information leak in api CVE-2023-1625 Fix available 7.4 HighMarch 27, 2023
• openstack-heat-doc SUSE Werkzeug may allow high resource usage when parsing multipart form data with many fields CVE-2023-25577 Fix available 7.5 HighFebruary 14, 2023
• openstack-heat-doc SUSE OpenStack Nova Live migration fails to update persistent domain XML CVE-2020-17376 Fix available 8.3 HighAugust 26, 2020
• openstack-heat-doc SUSE Grafana stored XSS CVE-2020-11110 Public exploitFix available 5.4 MediumJuly 27, 2020
• openstack-heat-doc SUSE Out-of-bounds reads in Pillow CVE-2020-10177 Fix available 5.5 MediumJune 25, 2020
• openstack-heat-doc SUSE Out-of-bounds reads in Pillow CVE-2020-10994 Fix available 5.5 MediumJune 25, 2020
• openstack-heat-doc SUSE Out-of-bounds read in Pillow CVE-2020-10378 Fix available 5.5 MediumJune 25, 2020
• openstack-heat-doc SUSE Server Side Request Forgery in Grafana CVE-2020-13379 Public exploitFix available EPSS 99.9% 8.2 HighJune 3, 2020
• openstack-heat-doc SUSE Grafana XSS via adding a link in General feature CVE-2018-18625 Fix available 6.1 MediumJune 2, 2020
• openstack-heat-doc SUSE Grafana XSS via a column style CVE-2018-18624 Fix available 6.1 MediumJune 2, 2020
• openstack-heat-doc SUSE Grafana XSS in Dashboard Text Panel CVE-2018-18623 Fix available 6.1 MediumJune 2, 2020
• openstack-heat-doc SUSE Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible CVE-2020-10744 Fix available 5.0 MediumMay 15, 2020
• openstack-heat-doc SUSE Grafana version < 6.7.3 is vulnerable for annotation popup XSS. CVE-2020-12052 Fix available 6.1 MediumApril 27, 2020
• openstack-heat-doc SUSE Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File CVE-2020-1733 Fix available 5.0 MediumMarch 11, 2020
• openstack-heat-doc SUSE mysql-systemd-helper allows setting 640 permissions of arbitrary files CVE-2019-18901 5.1 MediumFebruary 26, 2020
• openstack-heat-doc SUSE crowbar provision leaks admin password to all nodes in cleartext CVE-2018-17954 9.3 CriticalFebruary 3, 2020
• openstack-heat-doc SUSE libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation CVE-2020-7595 Fix available 7.5 HighJanuary 21, 2020
• openstack-heat-doc SUSE Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions... CVE-2020-2574 Fix available 5.9 MediumJanuary 15, 2020
• openstack-heat-doc SUSE Potential DOS attack in Puma CVE-2019-16770 Fix available 5.3 MediumDecember 5, 2019
• openstack-heat-doc SUSE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).... CVE-2019-2974 Fix available 6.5 MediumOctober 16, 2019
• openstack-heat-doc SUSE Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions... CVE-2019-2938 Fix available 4.4 MediumOctober 16, 2019
• openstack-heat-doc SUSE Haml vulnerable to cross-site scripting CVE-2017-1002201 Fix available 6.1 MediumOctober 15, 2019
• openstack-heat-doc SUSE In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This... CVE-2019-15043 Public exploitFix available EPSS 63.4% 7.5 HighSeptember 3, 2019
• openstack-heat-doc SUSE Nokogiri Command Injection Vulnerability CVE-2019-5477 Fix available 9.8 CriticalAugust 16, 2019
• openstack-heat-doc SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser).... CVE-2019-2805 Fix available 6.5 MediumJuly 19, 2019
• openstack-heat-doc SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported... CVE-2019-2758 Fix available 5.5 MediumJuly 19, 2019
• openstack-heat-doc SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML).... CVE-2019-2740 Fix available 6.5 MediumJuly 19, 2019
• openstack-heat-doc SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:... CVE-2019-2739 Fix available 5.1 MediumJuly 19, 2019
• openstack-heat-doc SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable... CVE-2019-2737 Fix available 4.9 MediumJuly 19, 2019
• openstack-heat-doc SUSE python-engineio vulnerable to Cross-Site Request Forgery (CSRF) CVE-2019-13611 Fix available 8.8 HighJuly 15, 2019
• openstack-heat-doc SUSE Uninitialized read in Nokogiri gem CVE-2019-13117 Fix available 5.3 MediumJuly 1, 2019
• openstack-heat-doc SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported... CVE-2019-2628 Fix available 4.9 MediumApril 23, 2019
• openstack-heat-doc SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:... CVE-2019-2627 Fix available 4.9 MediumApril 23, 2019
• openstack-heat-doc SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).... CVE-2019-2614 Fix available 4.4 MediumApril 23, 2019
• openstack-heat-doc SUSE Nokogiri vulnerable to libxslt protection mechanism bypass CVE-2019-11068 Fix available 9.8 CriticalApril 10, 2019
• openstack-heat-doc SUSE OpenStack Neutron overlapping security group rules prevents compute node network configuration CVE-2019-10876 Fix available 6.5 MediumApril 5, 2019
• openstack-heat-doc SUSE OpenStack Neutron's unsupported dport option prevents applying security groups CVE-2019-9735 Fix available 6.5 MediumMarch 12, 2019
• openstack-heat-doc SUSE Uncontrolled Memory Consumption in Django CVE-2019-6975 Fix available 7.5 HighFebruary 11, 2019
• openstack-heat-doc SUSE Improper Input Validation in Django CVE-2019-3498 Fix available 6.5 MediumJanuary 6, 2019
• openstack-heat-doc SUSE Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary... CVE-2018-19039 Fix available 6.5 MediumDecember 13, 2018
• openstack-heat-doc SUSE Pyopenssl Incorrect Memory Management CVE-2018-1000808 Fix available 5.9 MediumOctober 8, 2018
• openstack-heat-doc SUSE PyOpenSSL Use-After-Free vulnerability CVE-2018-1000807 Fix available 8.1 HighOctober 8, 2018
• openstack-heat-doc SUSE Security update for crowbar-core, crowbar-openstack, grafana, novnc, openstack-keystone, openstack-neutron, openstack-neutron-lbaas, openstack-nova, openstack-tempest, python-pysaml2, python-urllib3,… CVE-2018-558213 Rejected No scoreAugust 29, 2018
• openstack-heat-doc SUSE Grafana Authentication Bypass CVE-2018-15727 Public exploitFix available EPSS 63.1% 9.8 CriticalAugust 29, 2018
• openstack-heat-doc SUSE Django open redirect CVE-2018-14574 Fix available EPSS 25.5% 6.1 MediumAugust 1, 2018
• openstack-heat-doc SUSE In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an... CVE-2018-14432 Fix available 5.3 MediumJuly 31, 2018
• openstack-heat-doc SUSE OpenStack Nova DoS by rebuilding the same instance with a new image multiple times CVE-2017-17051 Fix available 8.6 HighDecember 5, 2017
• openstack-heat-doc SUSE OpenStack Horizon Cross-site Scripting (XSS) CVE-2017-7400 Fix available 4.8 MediumApril 3, 2017
• openstack-heat-doc SUSE OpenStack Nova logs sensitive context from notification exceptions CVE-2017-7214 Fix available 9.8 CriticalMarch 21, 2017
• openstack-heat-doc SUSE PySAML2 XML external entity attack CVE-2016-10127 Fix available 9.0 CriticalFebruary 27, 2017
• Show olderLoading…