openstack-heat vulnerabilities (SUSE)
76 vulnerabilities.
openstack-heatSUSEOpenStack Neutron overlapping security group rules prevents compute node network configuration6.5 Mediumopenstack-heatSUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumopenstack-heatSUSEOpenStack Neutron's unsupported dport option prevents applying security groups6.5 Mediumopenstack-heatSUSESQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 Criticalopenstack-heatSUSE** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to...9.8 Criticalopenstack-heatSUSEUncontrolled Memory Consumption in Django7.5 Highopenstack-heatSUSESQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 Highopenstack-heatSUSEImproper Input Validation in Django6.5 Mediumopenstack-heatSUSEGrafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary...6.5 Mediumopenstack-heatSUSEPyopenssl Incorrect Memory Management5.9 Mediumopenstack-heatSUSEPyOpenSSL Use-After-Free vulnerability8.1 Highopenstack-heatSUSESecurity update for crowbar-core, crowbar-openstack, grafana, novnc, openstack-keystone, openstack-neutron, openstack-neutron-lbaas, openstack-nova, openstack-tempest, python-pysaml2, python-urllib3,…No scoreopenstack-heatSUSEGrafana Authentication Bypass9.8 Criticalopenstack-heatSUSEDjango open redirect6.1 Mediumopenstack-heatSUSEIn the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an...5.3 Mediumopenstack-heatSUSEOpenStack Nova DoS by rebuilding the same instance with a new image multiple times8.6 Highopenstack-heatSUSEOpenStack Horizon Cross-site Scripting (XSS)4.8 Mediumopenstack-heatSUSEOpenStack Nova logs sensitive context from notification exceptions9.8 Criticalopenstack-heatSUSEPySAML2 XML external entity attack9.0 Criticalopenstack-heatSUSEOpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability5.4 Mediumopenstack-heatSUSEOpenStack Neutron Intended MAC-spoofing protection mechanism bypass8.2 Highopenstack-heatSUSEOpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism8.2 Highopenstack-heatSUSEOpenStack Nova host data access through resize/migration5.3 Mediumopenstack-heatSUSEPillow Buffer overflow in ImagingFliDecode6.5 Mediumopenstack-heatSUSErest-client allows local users to obtain sensitive information by reading the log2.1 Lowopenstack-heatSUSEOpenStack Glance Denial of service by creating a large number of images4.0 Medium