openstack-nova vulnerabilities (SUSE)
180 vulnerabilities.
openstack-novaSUSEmemcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str...7.5 Highopenstack-novaSUSENokogiri Command Injection Vulnerability9.8 Criticalopenstack-novaSUSEDeserialization of Untrusted Data in Apache Storm9.8 Criticalopenstack-novaSUSEExposure of Sensitive Information in Apache Storm Logviewer7.5 Highopenstack-novaSUSEExposure of Sensitive Information to an Unauthorized Actor in ansible4.6 Mediumopenstack-novaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....6.5 Mediumopenstack-novaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...5.5 Mediumopenstack-novaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML)....6.5 Mediumopenstack-novaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...5.1 Mediumopenstack-novaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable...4.9 Mediumopenstack-novaSUSEpython-engineio vulnerable to Cross-Site Request Forgery (CSRF)8.8 Highopenstack-novaSUSEUninitialized read in Nokogiri gem5.3 Mediumopenstack-novaSUSEAccess control bypass in Apache ZooKeeper5.9 Mediumopenstack-novaSUSEIn memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru...7.5 Highopenstack-novaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...4.9 Mediumopenstack-novaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...4.9 Mediumopenstack-novaSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....4.4 Mediumopenstack-novaSUSEImproper Certificate Validation in urllib37.5 Highopenstack-novaSUSEImproper Neutralization of CRLF Sequences in urllib3 library for Python6.1 Mediumopenstack-novaSUSENokogiri vulnerable to libxslt protection mechanism bypass9.8 Criticalopenstack-novaSUSEJinja2 sandbox escape vulnerability8.6 Highopenstack-novaSUSEJinja2 sandbox escape via string formatting8.6 Highopenstack-novaSUSEOpenStack Neutron overlapping security group rules prevents compute node network configuration6.5 Mediumopenstack-novaSUSEA vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An...6.5 Mediumopenstack-novaSUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumopenstack-novaSUSEOpenStack Neutron's unsupported dport option prevents applying security groups6.5 Mediumopenstack-novaSUSESQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 Criticalopenstack-novaSUSEAnsible Path Traversal vulnerability4.2 Mediumopenstack-novaSUSE** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to...9.8 Criticalopenstack-novaSUSEUncontrolled Memory Consumption in Django7.5 Highopenstack-novaSUSESQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 Highopenstack-novaSUSEImproper Input Validation in Django6.5 Mediumopenstack-novaSUSEAnsible sensitive information disclosure3.1 Lowopenstack-novaSUSEGrafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary...6.5 Mediumopenstack-novaSUSEPowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4...5.3 Mediumopenstack-novaSUSEPowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor...5.3 Mediumopenstack-novaSUSEAnsible Logs Passwords If PowerShell ScriptBlock is Enabled4.2 Mediumopenstack-novaSUSEAnsible Leaks Data Passed to ssh-keygen7.8 Highopenstack-novaSUSEPyopenssl Incorrect Memory Management5.9 Mediumopenstack-novaSUSEPyOpenSSL Use-After-Free vulnerability8.1 Highopenstack-novaSUSESecurity update for crowbar-core, crowbar-openstack, grafana, novnc, openstack-keystone, openstack-neutron, openstack-neutron-lbaas, openstack-nova, openstack-tempest, python-pysaml2, python-urllib3,…No scoreopenstack-novaSUSEGrafana Authentication Bypass9.8 Criticalopenstack-novaSUSEDjango open redirect6.1 Mediumopenstack-novaSUSEA vulnerability was found in Openstack Glance. No limits are enforced within the Glance image...4.3 Mediumopenstack-novaSUSEIn the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an...5.3 Mediumopenstack-novaSUSEAnsible Arbitrary Code Execution7.8 Highopenstack-novaSUSEMemcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network...7.5 Highopenstack-novaSUSEOpenStack Nova Denial of service attack on the compute host7.5 Highopenstack-novaSUSEKibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL...6.1 Mediumopenstack-novaSUSEOpenStack Nova DoS by rebuilding the same instance with a new image multiple times8.6 High- Show moreLoading…