openstack-manila vulnerabilities (SUSE)
86 vulnerabilities.
-
openstack-manilaSUSE Django Directory Traversal via archive.extract 5.3 Medium -
openstack-manilaSUSE Improper Authentication in InfluxDB 9.8 Critical -
openstack-manilaSUSE Grafana XSS via a query alias for the ElasticSearch datasource 6.1 Medium -
openstack-manilaSUSE CRLF injection in urllib3 6.5 Medium -
openstack-manilaSUSE Flask-Cors Directory Traversal vulnerability 7.5 High -
openstack-manilaSUSE OpenStack Nova Live migration fails to update persistent domain XML 8.3 High -
openstack-manilaSUSE Grafana stored XSS 5.4 Medium -
openstack-manilaSUSE It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in... 4.3 Medium -
openstack-manilaSUSE Out-of-bounds reads in Pillow 5.5 Medium -
openstack-manilaSUSE Out-of-bounds read in Pillow 8.1 High -
openstack-manilaSUSE Out-of-bounds reads in Pillow 5.5 Medium -
openstack-manilaSUSE Out-of-bounds read in Pillow 5.5 Medium -
openstack-manilaSUSE Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names 7.5 High -
openstack-manilaSUSE Openstack cinder Improper handling of ScaleIO backend credentials 6.5 Medium -
openstack-manilaSUSE Server Side Request Forgery in Grafana 8.2 High -
openstack-manilaSUSE XSS in Django 6.1 Medium -
openstack-manilaSUSE Data leakage via cache key collision in Django 5.9 Medium -
openstack-manilaSUSE Grafana XSS via adding a link in General feature 6.1 Medium -
openstack-manilaSUSE Grafana XSS via a column style 6.1 Medium -
openstack-manilaSUSE Grafana XSS in Dashboard Text Panel 6.1 Medium -
openstack-manilaSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 6.8 Medium -
openstack-manilaSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 7.5 High -
openstack-manilaSUSE Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible 5.0 Medium -
openstack-manilaSUSE Information disclosure issue in Active Resource 7.5 High -
openstack-manilaSUSE Grafana version < 6.7.3 is vulnerable for annotation popup XSS. 6.1 Medium -
openstack-manilaSUSE Unsafe object creation in json RubyGem 7.5 High -
openstack-manilaSUSE Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File 5.0 Medium -
openstack-manilaSUSE OpenStack Manila Unprivileged users can retrieve, use and manipulate share networks 8.3 High -
openstack-manilaSUSE SQL injection in Django 8.8 High -
openstack-manilaSUSE HTTP Response Splitting in Puma 6.5 Medium -
openstack-manilaSUSE crowbar provision leaks admin password to all nodes in cleartext 9.3 Critical -
openstack-manilaSUSE SQL injection in Django 9.8 Critical -
openstack-manilaSUSE Improper Verification of Cryptographic Signature in PySAML2 7.5 High -
openstack-manilaSUSE Uncontrolled Resource Consumption in Pillow 7.5 High -
openstack-manilaSUSE Buffer Copy without Checking Size of Input in Pillow 9.8 Critical -
openstack-manilaSUSE PCX P mode buffer overflow in Pillow 9.8 Critical -
openstack-manilaSUSE Out-of-bounds Read in Pillow 7.1 High -
openstack-manilaSUSE HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers 7.1 High -
openstack-manilaSUSE HTTP Request Smuggling: Content-Length Sent Twice in Waitress 7.1 High -
openstack-manilaSUSE HTTP Request Smuggling: LF vs CRLF handling in Waitress 7.1 High -
openstack-manilaSUSE HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress 7.1 High -
openstack-manilaSUSE Django Potential account hijack via password reset form 9.8 Critical -
openstack-manilaSUSE Double Free in psutil 7.5 High -
openstack-manilaSUSE DOS attack in Pillow when processing specially crafted image files 7.5 High -
openstack-manilaSUSE Security update for ansible1, ardana-ansible, ardana-cluster, ardana-db, ardana-extensions-nsx, ardana-glance, ardana-input-model, ardana-installer-ui, ardana-manila, ardana-monasca, ardana-neutron, a… No score -
openstack-manilaSUSE In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This... 7.5 High -
openstack-manilaSUSE memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str... 7.5 High -
openstack-manilaSUSE Deserialization of Untrusted Data in Apache Storm 9.8 Critical -
openstack-manilaSUSE Exposure of Sensitive Information in Apache Storm Logviewer 7.5 High -
openstack-manilaSUSE python-engineio vulnerable to Cross-Site Request Forgery (CSRF) 8.8 High - Show olderLoading…