openstack-murano vulnerabilities (SUSE)

27 vulnerabilities.

• openstack-murano SUSE Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection CVE-2022-34265 Public exploitFix available EPSS 73.6% 9.8 CriticalJuly 4, 2022
• openstack-murano SUSE SQL Injection in Django CVE-2022-28346 Public exploitFix available EPSS 18.7% 9.8 CriticalApril 11, 2022
• openstack-murano SUSE HTTP Request Smuggling in puma CVE-2022-24790 Fix available 9.1 CriticalMarch 30, 2022
• openstack-murano SUSE golang.org/x/net/http2 allows uncontrolled memory consumption CVE-2021-44716 Fix available 7.5 HighDecember 15, 2021
• openstack-murano SUSE Snapshot authentication bypass in grafana CVE-2021-39226 In KEVFix available EPSS 99.9% 9.8 CriticalOctober 5, 2021
• openstack-murano SUSE OpenStack Nova Live migration fails to update persistent domain XML CVE-2020-17376 Fix available 8.3 HighAugust 26, 2020
• openstack-murano SUSE Grafana stored XSS CVE-2020-11110 Public exploitFix available 5.4 MediumJuly 27, 2020
• openstack-murano SUSE Out-of-bounds reads in Pillow CVE-2020-10177 Fix available 5.5 MediumJune 25, 2020
• openstack-murano SUSE Out-of-bounds reads in Pillow CVE-2020-10994 Fix available 5.5 MediumJune 25, 2020
• openstack-murano SUSE Out-of-bounds read in Pillow CVE-2020-10378 Fix available 5.5 MediumJune 25, 2020
• openstack-murano SUSE Server Side Request Forgery in Grafana CVE-2020-13379 Public exploitFix available EPSS 99.9% 8.2 HighJune 3, 2020
• openstack-murano SUSE Grafana XSS via adding a link in General feature CVE-2018-18625 Fix available 6.1 MediumJune 2, 2020
• openstack-murano SUSE Grafana XSS via a column style CVE-2018-18624 Fix available 6.1 MediumJune 2, 2020
• openstack-murano SUSE Grafana XSS in Dashboard Text Panel CVE-2018-18623 Fix available 6.1 MediumJune 2, 2020
• openstack-murano SUSE Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible CVE-2020-10744 Fix available 5.0 MediumMay 15, 2020
• openstack-murano SUSE Grafana version < 6.7.3 is vulnerable for annotation popup XSS. CVE-2020-12052 Fix available 6.1 MediumApril 27, 2020
• openstack-murano SUSE Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File CVE-2020-1733 Fix available 5.0 MediumMarch 11, 2020
• openstack-murano SUSE OS Command Injection in ansible CVE-2020-1734 Fix available 7.4 HighMarch 3, 2020
• openstack-murano SUSE crowbar provision leaks admin password to all nodes in cleartext CVE-2018-17954 9.3 CriticalFebruary 3, 2020
• openstack-murano SUSE RabbitMQ Web Management Plugin DoS via heap overflow CVE-2019-11287 Public exploitFix available 4.5 MediumNovember 22, 2019
• openstack-murano SUSE In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This... CVE-2019-15043 Public exploitFix available EPSS 63.4% 7.5 HighSeptember 3, 2019
• openstack-murano SUSE OpenStack Neutron's unsupported dport option prevents applying security groups CVE-2019-9735 Fix available 6.5 MediumMarch 12, 2019
• openstack-murano SUSE Pyopenssl Incorrect Memory Management CVE-2018-1000808 Fix available 5.9 MediumOctober 8, 2018
• openstack-murano SUSE PyOpenSSL Use-After-Free vulnerability CVE-2018-1000807 Fix available 8.1 HighOctober 8, 2018
• openstack-murano SUSE OpenStack Nova DoS by rebuilding the same instance with a new image multiple times CVE-2017-17051 Fix available 8.6 HighDecember 5, 2017
• openstack-murano SUSE Pillow Buffer overflow in ImagingFliDecode CVE-2016-0775 Fix available 6.5 MediumFebruary 17, 2016
• openstack-murano SUSE rest-client allows local users to obtain sensitive information by reading the log CVE-2015-3448 Fix available 2.1 LowApril 29, 2015