openstack-nova vulnerabilities (SUSE)
180 vulnerabilities.
-
openstack-novaSUSE OpenStack Cinder, glance, and Nova vulnerable to Path Traversal 5.7 Medium -
openstack-novaSUSE Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection 9.8 Critical -
openstack-novaSUSE SQL Injection in Django 9.8 Critical -
openstack-novaSUSE HTTP Request Smuggling in puma 9.1 Critical -
openstack-novaSUSE An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user... 6.1 Medium -
openstack-novaSUSE Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma 3.7 Low -
openstack-novaSUSE Snapshot authentication bypass in grafana 9.8 Critical -
openstack-novaSUSE Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks 7.5 High -
openstack-novaSUSE Path Traversal in Django 4.9 Medium -
openstack-novaSUSE Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet 5.3 Medium -
openstack-novaSUSE Path Traversal in Django 7.5 High -
openstack-novaSUSE Directory Traversal in Django 5.3 Medium -
openstack-novaSUSE Denial of service in Grafana 7.5 High -
openstack-novaSUSE Activerecord-session_store Vulnerable to Timing Attack 5.3 Medium -
openstack-novaSUSE Web Cache Poisoning 5.9 Medium -
openstack-novaSUSE Authentication Bypass in Apache Cassandra 7.5 High -
openstack-novaSUSE Django Directory Traversal via archive.extract 5.3 Medium -
openstack-novaSUSE Open default xmlsec1 key-type preference 6.5 Medium -
openstack-novaSUSE SAML XML Signature wrapping 6.5 Medium -
openstack-novaSUSE Injection in Redcarpet 6.8 Medium -
openstack-novaSUSE XXE in Nokogiri 2.6 Low -
openstack-novaSUSE py vulnerable to Regular Expression Denial of Service 7.5 High -
openstack-novaSUSE Improper Authentication in InfluxDB 9.8 Critical -
openstack-novaSUSE Insufficiently random values in Ansible 5.5 Medium -
openstack-novaSUSE Grafana XSS via a query alias for the ElasticSearch datasource 6.1 Medium -
openstack-novaSUSE CRLF injection in urllib3 6.5 Medium -
openstack-novaSUSE Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible 5.5 Medium -
openstack-novaSUSE Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible 5.0 Medium -
openstack-novaSUSE Improper Verification of Cryptographic Signature in ansible 7.1 High -
openstack-novaSUSE Flask-Cors Directory Traversal vulnerability 7.5 High -
openstack-novaSUSE OpenStack Nova Live migration fails to update persistent domain XML 8.3 High -
openstack-novaSUSE Grafana stored XSS 5.4 Medium -
openstack-novaSUSE It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in... 4.3 Medium -
openstack-novaSUSE Out-of-bounds reads in Pillow 5.5 Medium -
openstack-novaSUSE Out-of-bounds read in Pillow 8.1 High -
openstack-novaSUSE Out-of-bounds reads in Pillow 5.5 Medium -
openstack-novaSUSE Out-of-bounds read in Pillow 5.5 Medium -
openstack-novaSUSE Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names 7.5 High -
openstack-novaSUSE Openstack cinder Improper handling of ScaleIO backend credentials 6.5 Medium -
openstack-novaSUSE Server Side Request Forgery in Grafana 8.2 High -
openstack-novaSUSE XSS in Django 6.1 Medium -
openstack-novaSUSE Data leakage via cache key collision in Django 5.9 Medium -
openstack-novaSUSE Grafana XSS via adding a link in General feature 6.1 Medium -
openstack-novaSUSE Grafana XSS via a column style 6.1 Medium -
openstack-novaSUSE Grafana XSS in Dashboard Text Panel 6.1 Medium -
openstack-novaSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 6.8 Medium -
openstack-novaSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 7.5 High -
openstack-novaSUSE Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible 5.0 Medium -
openstack-novaSUSE Exposure of Sensitive Information to an Unauthorized Actor in ansible 5.0 Medium -
openstack-novaSUSE Information disclosure issue in Active Resource 7.5 High - Show olderLoading…