openstack-horizon-plugin-gbp-ui vulnerabilities (SUSE)
37 vulnerabilities.
-
openstack-horizon-plugin-gbp-uiSUSE A flaw was found in the openstack-barbican component. This issue allows an access policy bypass... 5.9 Medium -
openstack-horizon-plugin-gbp-uiSUSE Apache Spark shell command injection vulnerability via Spark UI 8.8 High -
openstack-horizon-plugin-gbp-uiSUSE Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection 9.8 Critical -
openstack-horizon-plugin-gbp-uiSUSE sinatra does not validate expanded path matches 7.5 High -
openstack-horizon-plugin-gbp-uiSUSE SQL Injection in Django 9.8 Critical -
openstack-horizon-plugin-gbp-uiSUSE HTTP Request Smuggling in puma 9.1 Critical -
openstack-horizon-plugin-gbp-uiSUSE openstack-barbican Denial of Service vulnerability 4.9 Medium -
openstack-horizon-plugin-gbp-uiSUSE Barbican authorization flaw before v14.0.0 8.1 High -
openstack-horizon-plugin-gbp-uiSUSE Arbitrary expression injection in Pillow 9.8 Critical -
openstack-horizon-plugin-gbp-uiSUSE Out-of-bounds Read in Pillow 6.5 Medium -
openstack-horizon-plugin-gbp-uiSUSE Improper Initialization in Pillow 6.5 Medium -
openstack-horizon-plugin-gbp-uiSUSE golang.org/x/net/http2 allows uncontrolled memory consumption 7.5 High -
openstack-horizon-plugin-gbp-uiSUSE HTML Cleaner allows crafted and SVG embedded scripts to pass through 8.2 High -
openstack-horizon-plugin-gbp-uiSUSE Directory Traversal in Grafana 4.3 Medium -
openstack-horizon-plugin-gbp-uiSUSE An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user... 6.1 Medium -
openstack-horizon-plugin-gbp-uiSUSE XSS in the `of` option of the `.position()` util 6.5 Medium -
openstack-horizon-plugin-gbp-uiSUSE XSS in `*Text` options of the Datepicker widget 6.5 Medium -
openstack-horizon-plugin-gbp-uiSUSE XSS in the `altField` option of the Datepicker widget 6.5 Medium -
openstack-horizon-plugin-gbp-uiSUSE Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma 3.7 Low -
openstack-horizon-plugin-gbp-uiSUSE Snapshot authentication bypass in grafana 9.8 Critical -
openstack-horizon-plugin-gbp-uiSUSE OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value 6.5 Medium -
openstack-horizon-plugin-gbp-uiSUSE OpenStack Keystone allows information disclosure during account locking 7.5 High -
openstack-horizon-plugin-gbp-uiSUSE Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet 5.3 Medium -
openstack-horizon-plugin-gbp-uiSUSE lxml vulnerable to Cross-Site Scripting 6.1 Medium -
openstack-horizon-plugin-gbp-uiSUSE Injection in Redcarpet 6.8 Medium -
openstack-horizon-plugin-gbp-uiSUSE lxml vulnerable to Cross-site Scripting 6.1 Medium -
openstack-horizon-plugin-gbp-uiSUSE Improper Authentication in InfluxDB 9.8 Critical -
openstack-horizon-plugin-gbp-uiSUSE Grafana XSS via a query alias for the ElasticSearch datasource 6.1 Medium -
openstack-horizon-plugin-gbp-uiSUSE CRLF injection in urllib3 6.5 Medium -
openstack-horizon-plugin-gbp-uiSUSE OS Command Injection in ansible 7.4 High -
openstack-horizon-plugin-gbp-uiSUSE Improper Verification of Cryptographic Signature in PySAML2 7.5 High -
openstack-horizon-plugin-gbp-uiSUSE RabbitMQ Web Management Plugin DoS via heap overflow 4.5 Medium -
openstack-horizon-plugin-gbp-uiSUSE Jinja2 sandbox escape vulnerability 8.6 High -
openstack-horizon-plugin-gbp-uiSUSE Jinja2 sandbox escape via string formatting 8.6 High -
openstack-horizon-plugin-gbp-uiSUSE ** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to... 9.8 Critical -
openstack-horizon-plugin-gbp-uiSUSE Improper Neutralization of Input During Web Page Generation in LXML 6.1 Medium -
openstack-horizon-plugin-gbp-uiSUSE In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an... 5.3 Medium