openstack-heat-gbp vulnerabilities (SUSE)
37 vulnerabilities.
-
openstack-heat-gbpSUSE A flaw was found in the openstack-barbican component. This issue allows an access policy bypass... 5.9 Medium -
openstack-heat-gbpSUSE Apache Spark shell command injection vulnerability via Spark UI 8.8 High -
openstack-heat-gbpSUSE sinatra does not validate expanded path matches 7.5 High -
openstack-heat-gbpSUSE openstack-barbican Denial of Service vulnerability 4.9 Medium -
openstack-heat-gbpSUSE Barbican authorization flaw before v14.0.0 8.1 High -
openstack-heat-gbpSUSE Arbitrary expression injection in Pillow 9.8 Critical -
openstack-heat-gbpSUSE Out-of-bounds Read in Pillow 6.5 Medium -
openstack-heat-gbpSUSE Improper Initialization in Pillow 6.5 Medium -
openstack-heat-gbpSUSE golang.org/x/net/http2 allows uncontrolled memory consumption 7.5 High -
openstack-heat-gbpSUSE HTML Cleaner allows crafted and SVG embedded scripts to pass through 8.2 High -
openstack-heat-gbpSUSE Directory Traversal in Grafana 4.3 Medium -
openstack-heat-gbpSUSE An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user... 6.1 Medium -
openstack-heat-gbpSUSE XSS in the `of` option of the `.position()` util 6.5 Medium -
openstack-heat-gbpSUSE XSS in `*Text` options of the Datepicker widget 6.5 Medium -
openstack-heat-gbpSUSE XSS in the `altField` option of the Datepicker widget 6.5 Medium -
openstack-heat-gbpSUSE Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma 3.7 Low -
openstack-heat-gbpSUSE OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value 6.5 Medium -
openstack-heat-gbpSUSE OpenStack Keystone allows information disclosure during account locking 7.5 High -
openstack-heat-gbpSUSE Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet 5.3 Medium -
openstack-heat-gbpSUSE lxml vulnerable to Cross-Site Scripting 6.1 Medium -
openstack-heat-gbpSUSE Injection in Redcarpet 6.8 Medium -
openstack-heat-gbpSUSE lxml vulnerable to Cross-site Scripting 6.1 Medium -
openstack-heat-gbpSUSE Improper Authentication in InfluxDB 9.8 Critical -
openstack-heat-gbpSUSE Grafana XSS via a query alias for the ElasticSearch datasource 6.1 Medium -
openstack-heat-gbpSUSE CRLF injection in urllib3 6.5 Medium -
openstack-heat-gbpSUSE Improper Verification of Cryptographic Signature in PySAML2 7.5 High -
openstack-heat-gbpSUSE Nokogiri vulnerable to libxslt protection mechanism bypass 9.8 Critical -
openstack-heat-gbpSUSE Jinja2 sandbox escape vulnerability 8.6 High -
openstack-heat-gbpSUSE Jinja2 sandbox escape via string formatting 8.6 High -
openstack-heat-gbpSUSE OpenStack Neutron overlapping security group rules prevents compute node network configuration 6.5 Medium -
openstack-heat-gbpSUSE ** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to... 9.8 Critical -
openstack-heat-gbpSUSE Uncontrolled Memory Consumption in Django 7.5 High -
openstack-heat-gbpSUSE Improper Input Validation in Django 6.5 Medium -
openstack-heat-gbpSUSE PyKMIP Denial of service vulnerability 6.5 Medium -
openstack-heat-gbpSUSE Improper Neutralization of Input During Web Page Generation in LXML 6.1 Medium -
openstack-heat-gbpSUSE Django open redirect 6.1 Medium -
openstack-heat-gbpSUSE pysaml2 Improper Authentication vulnerability 8.1 High