openstack-neutron vulnerabilities (SUSE)

181 vulnerabilities.

• openstack-neutron SUSE A flaw was found in the openstack-barbican component. This issue allows an access policy bypass... CVE-2022-3100 Fix available 5.9 MediumSeptember 29, 2022
• openstack-neutron SUSE Apache Spark shell command injection vulnerability via Spark UI CVE-2022-33891 In KEVPublic exploitFix available EPSS 93.2% 8.8 HighJuly 18, 2022
• openstack-neutron SUSE sinatra does not validate expanded path matches CVE-2022-29970 Fix available 7.5 HighMay 2, 2022
• openstack-neutron SUSE openstack-barbican Denial of Service vulnerability CVE-2022-23452 Fix available 4.9 MediumJanuary 28, 2022
• openstack-neutron SUSE Barbican authorization flaw before v14.0.0 CVE-2022-23451 Fix available 8.1 HighJanuary 28, 2022
• openstack-neutron SUSE Arbitrary expression injection in Pillow CVE-2022-22817 Fix available 9.8 CriticalJanuary 7, 2022
• openstack-neutron SUSE Out-of-bounds Read in Pillow CVE-2022-22816 Fix available 6.5 MediumJanuary 7, 2022
• openstack-neutron SUSE Improper Initialization in Pillow CVE-2022-22815 Fix available 6.5 MediumJanuary 7, 2022
• openstack-neutron SUSE golang.org/x/net/http2 allows uncontrolled memory consumption CVE-2021-44716 Fix available 7.5 HighDecember 15, 2021
• openstack-neutron SUSE HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-43818 Fix available 8.2 HighDecember 13, 2021
• openstack-neutron SUSE Directory Traversal in Grafana CVE-2021-43813 Fix available EPSS 56.6% 4.3 MediumDecember 10, 2021
• openstack-neutron SUSE XSS in the `of` option of the `.position()` util CVE-2021-41184 Public exploitFix available EPSS 40.8% 6.5 MediumOctober 26, 2021
• openstack-neutron SUSE XSS in `*Text` options of the Datepicker widget CVE-2021-41183 Fix available 6.5 MediumOctober 26, 2021
• openstack-neutron SUSE XSS in the `altField` option of the Datepicker widget CVE-2021-41182 Public exploitFix available EPSS 39.4% 6.5 MediumOctober 26, 2021
• openstack-neutron SUSE OpenStack Neutron Denial of Service vulnerability CVE-2021-40797 Fix available 6.5 MediumSeptember 8, 2021
• openstack-neutron SUSE OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value CVE-2021-40085 Fix available 6.5 MediumAugust 31, 2021
• openstack-neutron SUSE OpenStack Keystone allows information disclosure during account locking CVE-2021-38155 Fix available 7.5 HighAugust 6, 2021
• openstack-neutron SUSE Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks CVE-2021-33571 Fix available 7.5 HighJune 2, 2021
• openstack-neutron SUSE Path Traversal in Django CVE-2021-33203 Fix available 4.9 MediumJune 2, 2021
• openstack-neutron SUSE Path Traversal in Django CVE-2021-31542 Fix available 7.5 HighMay 4, 2021
• openstack-neutron SUSE Directory Traversal in Django CVE-2021-28658 Fix available 5.3 MediumApril 6, 2021
• openstack-neutron SUSE lxml vulnerable to Cross-Site Scripting CVE-2021-28957 Fix available 6.1 MediumMarch 21, 2021
• openstack-neutron SUSE Denial of service in Grafana CVE-2021-27358 Fix available EPSS 83.0% 7.5 HighMarch 18, 2021
• openstack-neutron SUSE Activerecord-session_store Vulnerable to Timing Attack CVE-2019-25025 Fix available 5.3 MediumMarch 5, 2021
• openstack-neutron SUSE Web Cache Poisoning CVE-2021-23336 Fix available EPSS 40.7% 5.9 MediumFebruary 15, 2021
• openstack-neutron SUSE Authentication Bypass in Apache Cassandra CVE-2020-17516 Fix available 7.5 HighFebruary 3, 2021
• openstack-neutron SUSE Django Directory Traversal via archive.extract CVE-2021-3281 Public exploitFix available 5.3 MediumFebruary 1, 2021
• openstack-neutron SUSE Open default xmlsec1 key-type preference CVE-2021-21239 Public exploitFix available 6.5 MediumJanuary 21, 2021
• openstack-neutron SUSE SAML XML Signature wrapping CVE-2021-21238 Fix available 6.5 MediumJanuary 21, 2021
• openstack-neutron SUSE py vulnerable to Regular Expression Denial of Service CVE-2020-29651 Fix available 7.5 HighDecember 9, 2020
• openstack-neutron SUSE lxml vulnerable to Cross-site Scripting CVE-2020-27783 Fix available 6.1 MediumNovember 26, 2020
• openstack-neutron SUSE Improper Authentication in InfluxDB CVE-2019-20933 Public exploitFix available EPSS 30.9% 9.8 CriticalNovember 19, 2020
• openstack-neutron SUSE Insufficiently random values in Ansible CVE-2020-10729 Fix available 5.5 MediumNovember 12, 2020
• openstack-neutron SUSE Grafana XSS via a query alias for the ElasticSearch datasource CVE-2020-24303 Fix available 6.1 MediumOctober 28, 2020
• openstack-neutron SUSE CRLF injection in urllib3 CVE-2020-26137 Fix available 6.5 MediumSeptember 29, 2020
• openstack-neutron SUSE Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible CVE-2020-14332 Fix available 5.5 MediumSeptember 11, 2020
• openstack-neutron SUSE Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible CVE-2020-14330 Fix available 5.0 MediumSeptember 11, 2020
• openstack-neutron SUSE Improper Verification of Cryptographic Signature in ansible CVE-2020-14365 Fix available 7.1 HighSeptember 5, 2020
• openstack-neutron SUSE Flask-Cors Directory Traversal vulnerability CVE-2020-25032 Fix available 7.5 HighAugust 31, 2020
• openstack-neutron SUSE OpenStack Nova Live migration fails to update persistent domain XML CVE-2020-17376 Fix available 8.3 HighAugust 26, 2020
• openstack-neutron SUSE Grafana stored XSS CVE-2020-11110 Public exploitFix available 5.4 MediumJuly 27, 2020
• openstack-neutron SUSE It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in... CVE-2020-10743 4.3 MediumJuly 14, 2020
• openstack-neutron SUSE Out-of-bounds reads in Pillow CVE-2020-10177 Fix available 5.5 MediumJune 25, 2020
• openstack-neutron SUSE Out-of-bounds read in Pillow CVE-2020-11538 Fix available 8.1 HighJune 25, 2020
• openstack-neutron SUSE Out-of-bounds reads in Pillow CVE-2020-10994 Fix available 5.5 MediumJune 25, 2020
• openstack-neutron SUSE Out-of-bounds read in Pillow CVE-2020-10378 Fix available 5.5 MediumJune 25, 2020
• openstack-neutron SUSE Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names CVE-2020-8184 Fix available 7.5 HighJune 19, 2020
• openstack-neutron SUSE Openstack cinder Improper handling of ScaleIO backend credentials CVE-2020-10755 Fix available 6.5 MediumJune 10, 2020
• openstack-neutron SUSE Server Side Request Forgery in Grafana CVE-2020-13379 Public exploitFix available EPSS 99.9% 8.2 HighJune 3, 2020
• openstack-neutron SUSE XSS in Django CVE-2020-13596 Fix available 6.1 MediumJune 3, 2020
• Show olderLoading…