openstack-ironic-doc vulnerabilities (SUSE)

40 vulnerabilities.

• openstack-ironic-doc SUSE OpenStack Nova Live migration fails to update persistent domain XML CVE-2020-17376 Fix available 8.3 HighAugust 26, 2020
• openstack-ironic-doc SUSE Grafana stored XSS CVE-2020-11110 Public exploitFix available 5.4 MediumJuly 27, 2020
• openstack-ironic-doc SUSE Out-of-bounds reads in Pillow CVE-2020-10177 Fix available 5.5 MediumJune 25, 2020
• openstack-ironic-doc SUSE Out-of-bounds reads in Pillow CVE-2020-10994 Fix available 5.5 MediumJune 25, 2020
• openstack-ironic-doc SUSE Out-of-bounds read in Pillow CVE-2020-10378 Fix available 5.5 MediumJune 25, 2020
• openstack-ironic-doc SUSE Server Side Request Forgery in Grafana CVE-2020-13379 Public exploitFix available EPSS 99.9% 8.2 HighJune 3, 2020
• openstack-ironic-doc SUSE Grafana XSS via adding a link in General feature CVE-2018-18625 Fix available 6.1 MediumJune 2, 2020
• openstack-ironic-doc SUSE Grafana XSS via a column style CVE-2018-18624 Fix available 6.1 MediumJune 2, 2020
• openstack-ironic-doc SUSE Grafana XSS in Dashboard Text Panel CVE-2018-18623 Fix available 6.1 MediumJune 2, 2020
• openstack-ironic-doc SUSE Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible CVE-2020-10744 Fix available 5.0 MediumMay 15, 2020
• openstack-ironic-doc SUSE Grafana version < 6.7.3 is vulnerable for annotation popup XSS. CVE-2020-12052 Fix available 6.1 MediumApril 27, 2020
• openstack-ironic-doc SUSE Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File CVE-2020-1733 Fix available 5.0 MediumMarch 11, 2020
• openstack-ironic-doc SUSE mysql-systemd-helper allows setting 640 permissions of arbitrary files CVE-2019-18901 5.1 MediumFebruary 26, 2020
• openstack-ironic-doc SUSE crowbar provision leaks admin password to all nodes in cleartext CVE-2018-17954 9.3 CriticalFebruary 3, 2020
• openstack-ironic-doc SUSE libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation CVE-2020-7595 Fix available 7.5 HighJanuary 21, 2020
• openstack-ironic-doc SUSE Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions... CVE-2020-2574 Fix available 5.9 MediumJanuary 15, 2020
• openstack-ironic-doc SUSE Potential DOS attack in Puma CVE-2019-16770 Fix available 5.3 MediumDecember 5, 2019
• openstack-ironic-doc SUSE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).... CVE-2019-2974 Fix available 6.5 MediumOctober 16, 2019
• openstack-ironic-doc SUSE Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions... CVE-2019-2938 Fix available 4.4 MediumOctober 16, 2019
• openstack-ironic-doc SUSE Haml vulnerable to cross-site scripting CVE-2017-1002201 Fix available 6.1 MediumOctober 15, 2019
• openstack-ironic-doc SUSE In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This... CVE-2019-15043 Public exploitFix available EPSS 63.4% 7.5 HighSeptember 3, 2019
• openstack-ironic-doc SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser).... CVE-2019-2805 Fix available 6.5 MediumJuly 19, 2019
• openstack-ironic-doc SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported... CVE-2019-2758 Fix available 5.5 MediumJuly 19, 2019
• openstack-ironic-doc SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML).... CVE-2019-2740 Fix available 6.5 MediumJuly 19, 2019
• openstack-ironic-doc SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:... CVE-2019-2739 Fix available 5.1 MediumJuly 19, 2019
• openstack-ironic-doc SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable... CVE-2019-2737 Fix available 4.9 MediumJuly 19, 2019
• openstack-ironic-doc SUSE Uninitialized read in Nokogiri gem CVE-2019-13117 Fix available 5.3 MediumJuly 1, 2019
• openstack-ironic-doc SUSE Nokogiri vulnerable to libxslt protection mechanism bypass CVE-2019-11068 Fix available 9.8 CriticalApril 10, 2019
• openstack-ironic-doc SUSE OpenStack Neutron overlapping security group rules prevents compute node network configuration CVE-2019-10876 Fix available 6.5 MediumApril 5, 2019
• openstack-ironic-doc SUSE OpenStack Neutron's unsupported dport option prevents applying security groups CVE-2019-9735 Fix available 6.5 MediumMarch 12, 2019
• openstack-ironic-doc SUSE Uncontrolled Memory Consumption in Django CVE-2019-6975 Fix available 7.5 HighFebruary 11, 2019
• openstack-ironic-doc SUSE Improper Input Validation in Django CVE-2019-3498 Fix available 6.5 MediumJanuary 6, 2019
• openstack-ironic-doc SUSE Pyopenssl Incorrect Memory Management CVE-2018-1000808 Fix available 5.9 MediumOctober 8, 2018
• openstack-ironic-doc SUSE PyOpenSSL Use-After-Free vulnerability CVE-2018-1000807 Fix available 8.1 HighOctober 8, 2018
• openstack-ironic-doc SUSE Django open redirect CVE-2018-14574 Fix available EPSS 25.5% 6.1 MediumAugust 1, 2018
• openstack-ironic-doc SUSE In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an... CVE-2018-14432 Fix available 5.3 MediumJuly 31, 2018
• openstack-ironic-doc SUSE OpenStack Nova DoS by rebuilding the same instance with a new image multiple times CVE-2017-17051 Fix available 8.6 HighDecember 5, 2017
• openstack-ironic-doc SUSE OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor CVE-2016-4985 Fix available 7.5 HighJuly 12, 2016
• openstack-ironic-doc SUSE Pillow Buffer overflow in ImagingFliDecode CVE-2016-0775 Fix available 6.5 MediumFebruary 17, 2016
• openstack-ironic-doc SUSE rest-client allows local users to obtain sensitive information by reading the log CVE-2015-3448 Fix available 2.1 LowApril 29, 2015