openstack-neutron-fwaas vulnerabilities (SUSE)
47 vulnerabilities.
openstack-neutron-fwaasSUSEIt was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in...4.3 Mediumopenstack-neutron-fwaasSUSEServer Side Request Forgery in Grafana8.2 Highopenstack-neutron-fwaasSUSEXSS in Django6.1 Mediumopenstack-neutron-fwaasSUSEData leakage via cache key collision in Django5.9 Mediumopenstack-neutron-fwaasSUSEHTTP Smuggling via Transfer-Encoding Header in Puma6.8 Mediumopenstack-neutron-fwaasSUSEHTTP Smuggling via Transfer-Encoding Header in Puma7.5 Highopenstack-neutron-fwaasSUSEInformation disclosure issue in Active Resource7.5 Highopenstack-neutron-fwaasSUSEGrafana version < 6.7.3 is vulnerable for annotation popup XSS.6.1 Mediumopenstack-neutron-fwaasSUSEUnsafe object creation in json RubyGem7.5 Highopenstack-neutron-fwaasSUSEHTTP Response Splitting in Puma6.5 Mediumopenstack-neutron-fwaasSUSEcrowbar provision leaks admin password to all nodes in cleartext9.3 Criticalopenstack-neutron-fwaasSUSEImproper Verification of Cryptographic Signature in PySAML27.5 Highopenstack-neutron-fwaasSUSEUncontrolled Resource Consumption in Pillow7.5 Highopenstack-neutron-fwaasSUSEPCX P mode buffer overflow in Pillow9.8 Criticalopenstack-neutron-fwaasSUSEOut-of-bounds Read in Pillow7.1 Highopenstack-neutron-fwaasSUSEHTTP Request Smuggling in Waitress: Invalid whitespace characters in headers7.1 Highopenstack-neutron-fwaasSUSEHTTP Request Smuggling: Content-Length Sent Twice in Waitress7.1 Highopenstack-neutron-fwaasSUSEHTTP Request Smuggling: LF vs CRLF handling in Waitress7.1 Highopenstack-neutron-fwaasSUSEHTTP Request Smuggling: Invalid Transfer-Encoding in Waitress7.1 Highopenstack-neutron-fwaasSUSEDjango Potential account hijack via password reset form9.8 Criticalopenstack-neutron-fwaasSUSEPotential DOS attack in Puma5.3 Mediumopenstack-neutron-fwaasSUSEDouble Free in psutil7.5 Highopenstack-neutron-fwaasSUSEDOS attack in Pillow when processing specially crafted image files7.5 Highopenstack-neutron-fwaasSUSEIn Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This...7.5 Highopenstack-neutron-fwaasSUSEmemcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str...7.5 Highopenstack-neutron-fwaasSUSEUninitialized read in Nokogiri gem5.3 Mediumopenstack-neutron-fwaasSUSEAccess control bypass in Apache ZooKeeper5.9 Mediumopenstack-neutron-fwaasSUSEIn memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru...7.5 Highopenstack-neutron-fwaasSUSENokogiri vulnerable to libxslt protection mechanism bypass9.8 Criticalopenstack-neutron-fwaasSUSEOpenStack Neutron overlapping security group rules prevents compute node network configuration6.5 Mediumopenstack-neutron-fwaasSUSEA vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An...6.5 Mediumopenstack-neutron-fwaasSUSEAnsible Path Traversal vulnerability4.2 Mediumopenstack-neutron-fwaasSUSEUncontrolled Memory Consumption in Django7.5 Highopenstack-neutron-fwaasSUSEImproper Input Validation in Django6.5 Mediumopenstack-neutron-fwaasSUSEGrafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary...6.5 Mediumopenstack-neutron-fwaasSUSEPyopenssl Incorrect Memory Management5.9 Mediumopenstack-neutron-fwaasSUSEPyOpenSSL Use-After-Free vulnerability8.1 Highopenstack-neutron-fwaasSUSEDjango open redirect6.1 Mediumopenstack-neutron-fwaasSUSEIn the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an...5.3 Mediumopenstack-neutron-fwaasSUSEMemcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network...7.5 Highopenstack-neutron-fwaasSUSEPysaml2 improperly initializes encryption vector5.3 Mediumopenstack-neutron-fwaasSUSEAn issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x...6.1 Mediumopenstack-neutron-fwaasSUSEAn issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x...6.1 Mediumopenstack-neutron-fwaasSUSEOpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability5.4 Mediumopenstack-neutron-fwaasSUSEOpenStack Neutron Intended MAC-spoofing protection mechanism bypass8.2 Highopenstack-neutron-fwaasSUSEOpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism8.2 Highopenstack-neutron-fwaasSUSEOpenStack Nova host data access through resize/migration5.3 Medium