openstack-neutron-gbp vulnerabilities (SUSE)
98 vulnerabilities.
openstack-neutron-gbpSUSEmysql-systemd-helper allows setting 640 permissions of arbitrary files5.1 Mediumopenstack-neutron-gbpSUSEcrowbar provision leaks admin password to all nodes in cleartext9.3 Criticalopenstack-neutron-gbpSUSElibxml as used in Nokogiri has an infinite loop in a certain end-of-file situation7.5 Highopenstack-neutron-gbpSUSEVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...5.9 Mediumopenstack-neutron-gbpSUSEImproper Verification of Cryptographic Signature in PySAML27.5 Highopenstack-neutron-gbpSUSEPotential DOS attack in Puma5.3 Mediumopenstack-neutron-gbpSUSERabbitMQ Web Management Plugin DoS via heap overflow4.5 Mediumopenstack-neutron-gbpSUSEDouble Free in psutil7.5 Highopenstack-neutron-gbpSUSEVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....6.5 Mediumopenstack-neutron-gbpSUSEVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...4.4 Mediumopenstack-neutron-gbpSUSEHaml vulnerable to cross-site scripting6.1 Mediumopenstack-neutron-gbpSUSEOpenStack Octavia Amphora-Agent not requiring Client-Certificate9.1 Criticalopenstack-neutron-gbpSUSESecurity update for ansible1, ardana-ansible, ardana-cluster, ardana-db, ardana-extensions-nsx, ardana-glance, ardana-input-model, ardana-installer-ui, ardana-manila, ardana-monasca, ardana-neutron, a…No scoreopenstack-neutron-gbpSUSEIn Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This...7.5 Highopenstack-neutron-gbpSUSENokogiri Command Injection Vulnerability9.8 Criticalopenstack-neutron-gbpSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....6.5 Mediumopenstack-neutron-gbpSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...5.5 Mediumopenstack-neutron-gbpSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML)....6.5 Mediumopenstack-neutron-gbpSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...5.1 Mediumopenstack-neutron-gbpSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable...4.9 Mediumopenstack-neutron-gbpSUSEpython-engineio vulnerable to Cross-Site Request Forgery (CSRF)8.8 Highopenstack-neutron-gbpSUSEUninitialized read in Nokogiri gem5.3 Mediumopenstack-neutron-gbpSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...4.9 Mediumopenstack-neutron-gbpSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...4.9 Mediumopenstack-neutron-gbpSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....4.4 Mediumopenstack-neutron-gbpSUSEImproper Certificate Validation in urllib37.5 Highopenstack-neutron-gbpSUSEImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 Mediumopenstack-neutron-gbpSUSENokogiri vulnerable to libxslt protection mechanism bypass9.8 Criticalopenstack-neutron-gbpSUSEJinja2 sandbox escape vulnerability8.6 Highopenstack-neutron-gbpSUSEJinja2 sandbox escape via string formatting8.6 Highopenstack-neutron-gbpSUSEOpenStack Neutron overlapping security group rules prevents compute node network configuration6.5 Mediumopenstack-neutron-gbpSUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumopenstack-neutron-gbpSUSEOpenStack Neutron's unsupported dport option prevents applying security groups6.5 Mediumopenstack-neutron-gbpSUSESQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 Criticalopenstack-neutron-gbpSUSE** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to...9.8 Criticalopenstack-neutron-gbpSUSEUncontrolled Memory Consumption in Django7.5 Highopenstack-neutron-gbpSUSESQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 Highopenstack-neutron-gbpSUSEImproper Input Validation in Django6.5 Mediumopenstack-neutron-gbpSUSEGrafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary...6.5 Mediumopenstack-neutron-gbpSUSEImproper Neutralization of Input During Web Page Generation in LXML6.1 Mediumopenstack-neutron-gbpSUSESecurity update for crowbar-core, crowbar-openstack, grafana, novnc, openstack-keystone, openstack-neutron, openstack-neutron-lbaas, openstack-nova, openstack-tempest, python-pysaml2, python-urllib3,…No scoreopenstack-neutron-gbpSUSEGrafana Authentication Bypass9.8 Criticalopenstack-neutron-gbpSUSEDjango open redirect6.1 Mediumopenstack-neutron-gbpSUSEKibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL...6.1 Mediumopenstack-neutron-gbpSUSEOpenStack Nova DoS by rebuilding the same instance with a new image multiple times8.6 Highopenstack-neutron-gbpSUSENode.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0,...7.5 Highopenstack-neutron-gbpSUSEPySAML2 XML external entity attack9.0 Criticalopenstack-neutron-gbpSUSErest-client allows local users to obtain sensitive information by reading the log2.1 Low