openstack-heat-templates vulnerabilities (SUSE)
86 vulnerabilities.
-
openstack-heat-templatesSUSE Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection 9.8 Critical -
openstack-heat-templatesSUSE SQL Injection in Django 9.8 Critical -
openstack-heat-templatesSUSE HTTP Request Smuggling in puma 9.1 Critical -
openstack-heat-templatesSUSE golang.org/x/net/http2 allows uncontrolled memory consumption 7.5 High -
openstack-heat-templatesSUSE An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user... 6.1 Medium -
openstack-heat-templatesSUSE Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma 3.7 Low -
openstack-heat-templatesSUSE Snapshot authentication bypass in grafana 9.8 Critical -
openstack-heat-templatesSUSE Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks 7.5 High -
openstack-heat-templatesSUSE Path Traversal in Django 4.9 Medium -
openstack-heat-templatesSUSE Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet 5.3 Medium -
openstack-heat-templatesSUSE Path Traversal in Django 7.5 High -
openstack-heat-templatesSUSE Directory Traversal in Django 5.3 Medium -
openstack-heat-templatesSUSE Denial of service in Grafana 7.5 High -
openstack-heat-templatesSUSE Activerecord-session_store Vulnerable to Timing Attack 5.3 Medium -
openstack-heat-templatesSUSE Web Cache Poisoning 5.9 Medium -
openstack-heat-templatesSUSE Authentication Bypass in Apache Cassandra 7.5 High -
openstack-heat-templatesSUSE Open default xmlsec1 key-type preference 6.5 Medium -
openstack-heat-templatesSUSE SAML XML Signature wrapping 6.5 Medium -
openstack-heat-templatesSUSE Injection in Redcarpet 6.8 Medium -
openstack-heat-templatesSUSE XXE in Nokogiri 2.6 Low -
openstack-heat-templatesSUSE py vulnerable to Regular Expression Denial of Service 7.5 High -
openstack-heat-templatesSUSE Improper Authentication in InfluxDB 9.8 Critical -
openstack-heat-templatesSUSE Grafana XSS via a query alias for the ElasticSearch datasource 6.1 Medium -
openstack-heat-templatesSUSE CRLF injection in urllib3 6.5 Medium -
openstack-heat-templatesSUSE It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in... 4.3 Medium -
openstack-heat-templatesSUSE Out-of-bounds reads in Pillow 5.5 Medium -
openstack-heat-templatesSUSE Out-of-bounds read in Pillow 8.1 High -
openstack-heat-templatesSUSE Out-of-bounds reads in Pillow 5.5 Medium -
openstack-heat-templatesSUSE Out-of-bounds read in Pillow 5.5 Medium -
openstack-heat-templatesSUSE Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names 7.5 High -
openstack-heat-templatesSUSE Openstack cinder Improper handling of ScaleIO backend credentials 6.5 Medium -
openstack-heat-templatesSUSE Server Side Request Forgery in Grafana 8.2 High -
openstack-heat-templatesSUSE XSS in Django 6.1 Medium -
openstack-heat-templatesSUSE Data leakage via cache key collision in Django 5.9 Medium -
openstack-heat-templatesSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 6.8 Medium -
openstack-heat-templatesSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 7.5 High -
openstack-heat-templatesSUSE Information disclosure issue in Active Resource 7.5 High -
openstack-heat-templatesSUSE Grafana version < 6.7.3 is vulnerable for annotation popup XSS. 6.1 Medium -
openstack-heat-templatesSUSE Unsafe object creation in json RubyGem 7.5 High -
openstack-heat-templatesSUSE SQL injection in Django 8.8 High -
openstack-heat-templatesSUSE OS Command Injection in ansible 7.4 High -
openstack-heat-templatesSUSE mysql-systemd-helper allows setting 640 permissions of arbitrary files 5.1 Medium -
openstack-heat-templatesSUSE crowbar provision leaks admin password to all nodes in cleartext 9.3 Critical -
openstack-heat-templatesSUSE SQL injection in Django 9.8 Critical -
openstack-heat-templatesSUSE libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation 7.5 High -
openstack-heat-templatesSUSE Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions... 5.9 Medium -
openstack-heat-templatesSUSE Improper Verification of Cryptographic Signature in PySAML2 7.5 High -
openstack-heat-templatesSUSE Uncontrolled Resource Consumption in Pillow 7.5 High -
openstack-heat-templatesSUSE Buffer Copy without Checking Size of Input in Pillow 9.8 Critical -
openstack-heat-templatesSUSE PCX P mode buffer overflow in Pillow 9.8 Critical - Show olderLoading…