openstack-ironic-python-agent vulnerabilities (SUSE)

31 vulnerabilities.

• openstack-ironic-python-agent SUSE Improper Authentication in InfluxDB CVE-2019-20933 Public exploitFix available EPSS 30.9% 9.8 CriticalNovember 19, 2020
• openstack-ironic-python-agent SUSE Grafana XSS via a query alias for the ElasticSearch datasource CVE-2020-24303 Fix available 6.1 MediumOctober 28, 2020
• openstack-ironic-python-agent SUSE CRLF injection in urllib3 CVE-2020-26137 Fix available 6.5 MediumSeptember 29, 2020
• openstack-ironic-python-agent SUSE Flask-Cors Directory Traversal vulnerability CVE-2020-25032 Fix available 7.5 HighAugust 31, 2020
• openstack-ironic-python-agent SUSE OpenStack Nova Live migration fails to update persistent domain XML CVE-2020-17376 Fix available 8.3 HighAugust 26, 2020
• openstack-ironic-python-agent SUSE Grafana stored XSS CVE-2020-11110 Public exploitFix available 5.4 MediumJuly 27, 2020
• openstack-ironic-python-agent SUSE Grafana XSS via adding a link in General feature CVE-2018-18625 Fix available 6.1 MediumJune 2, 2020
• openstack-ironic-python-agent SUSE Grafana XSS via a column style CVE-2018-18624 Fix available 6.1 MediumJune 2, 2020
• openstack-ironic-python-agent SUSE Grafana XSS in Dashboard Text Panel CVE-2018-18623 Fix available 6.1 MediumJune 2, 2020
• openstack-ironic-python-agent SUSE crowbar provision leaks admin password to all nodes in cleartext CVE-2018-17954 Fix available 9.3 CriticalFebruary 3, 2020
• openstack-ironic-python-agent SUSE Improper Verification of Cryptographic Signature in PySAML2 CVE-2020-5390 Fix available 7.5 HighJanuary 13, 2020
• openstack-ironic-python-agent SUSE Potential DOS attack in Puma CVE-2019-16770 Fix available 5.3 MediumDecember 5, 2019
• openstack-ironic-python-agent SUSE Security update for ansible1, ardana-ansible, ardana-cluster, ardana-db, ardana-extensions-nsx, ardana-glance, ardana-input-model, ardana-installer-ui, ardana-manila, ardana-monasca, ardana-neutron, a… SUSE-SU-2019:2562-1 Fix available No scoreOctober 4, 2019
• openstack-ironic-python-agent SUSE Deserialization of Untrusted Data in Apache Storm CVE-2018-11779 Fix available 9.8 CriticalJuly 25, 2019
• openstack-ironic-python-agent SUSE Exposure of Sensitive Information in Apache Storm Logviewer CVE-2019-0202 Fix available 7.5 HighJuly 25, 2019
• openstack-ironic-python-agent SUSE python-engineio vulnerable to Cross-Site Request Forgery (CSRF) CVE-2019-13611 Fix available 8.8 HighJuly 15, 2019
• openstack-ironic-python-agent SUSE Uninitialized read in Nokogiri gem CVE-2019-13117 Fix available 5.3 MediumJuly 1, 2019
• openstack-ironic-python-agent SUSE Improper Certificate Validation in urllib3 CVE-2019-11324 Fix available 7.5 HighApril 18, 2019
• openstack-ironic-python-agent SUSE Improper Neutralization of CRLF Sequences in urllib3 library for Python CVE-2019-11236 Fix available 6.1 MediumApril 15, 2019
• openstack-ironic-python-agent SUSE Nokogiri vulnerable to libxslt protection mechanism bypass CVE-2019-11068 Fix available 9.8 CriticalApril 10, 2019
• openstack-ironic-python-agent SUSE Jinja2 sandbox escape vulnerability CVE-2016-10745 Fix available 8.6 HighApril 8, 2019
• openstack-ironic-python-agent SUSE Jinja2 sandbox escape via string formatting CVE-2019-10906 Fix available 8.6 HighApril 6, 2019
• openstack-ironic-python-agent SUSE OpenStack Neutron overlapping security group rules prevents compute node network configuration CVE-2019-10876 Fix available 6.5 MediumApril 5, 2019
• openstack-ironic-python-agent SUSE An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through... CVE-2019-9740 Fix available 6.1 MediumMarch 12, 2019
• openstack-ironic-python-agent SUSE OpenStack Neutron's unsupported dport option prevents applying security groups CVE-2019-9735 Fix available 6.5 MediumMarch 12, 2019
• openstack-ironic-python-agent SUSE SQLAlchemy vulnerable to SQL Injection via order_by parameter CVE-2019-7164 Fix available 9.8 CriticalFebruary 20, 2019
• openstack-ironic-python-agent SUSE ** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to... CVE-2019-8341 Public exploitFix availableDisputed EPSS 43.9% 9.8 CriticalFebruary 15, 2019
• openstack-ironic-python-agent SUSE SQLAlchemy is vulnerable to SQL Injection via group_by parameter CVE-2019-7548 Fix available 7.8 HighFebruary 6, 2019
• openstack-ironic-python-agent SUSE Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary... CVE-2018-19039 Fix available 6.5 MediumDecember 13, 2018
• openstack-ironic-python-agent SUSE OpenStack Nova DoS by rebuilding the same instance with a new image multiple times CVE-2017-17051 Fix available 8.6 HighDecember 5, 2017
• openstack-ironic-python-agent SUSE rest-client allows local users to obtain sensitive information by reading the log CVE-2015-3448 Fix available 2.1 LowApril 29, 2015