openstack-nova vulnerabilities (SUSE)
180 vulnerabilities.
openstack-novaSUSEExposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible5.0 Mediumopenstack-novaSUSEPath Traversal in Ansible5.2 Mediumopenstack-novaSUSEGrafana version < 6.7.3 is vulnerable for annotation popup XSS.6.1 Mediumopenstack-novaSUSEUnsafe object creation in json RubyGem7.5 Highopenstack-novaSUSECode Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible7.9 Highopenstack-novaSUSEArgument Injection in Ansible3.9 Lowopenstack-novaSUSEExposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible3.9 Lowopenstack-novaSUSEPath Traversal in Ansible4.2 Mediumopenstack-novaSUSEIncorrect Permission Assignment for Critical Resource in Ansible2.2 Lowopenstack-novaSUSEInsertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible5.0 Mediumopenstack-novaSUSEExposure of Sensitive Information to an Unauthorized Actor in Ansible3.9 Lowopenstack-novaSUSEAnsible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File5.0 Mediumopenstack-novaSUSEOpenStack Manila Unprivileged users can retrieve, use and manipulate share networks8.3 Highopenstack-novaSUSEPath Traversal in Ansible7.5 Highopenstack-novaSUSESQL injection in Django8.8 Highopenstack-novaSUSEOS Command Injection in ansible7.4 Highopenstack-novaSUSEHTTP Response Splitting in Puma6.5 Mediumopenstack-novaSUSEmysql-systemd-helper allows setting 640 permissions of arbitrary files5.1 Mediumopenstack-novaSUSEcrowbar provision leaks admin password to all nodes in cleartext9.3 Criticalopenstack-novaSUSESQL injection in Django9.8 Criticalopenstack-novaSUSEExternally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible7.3 Highopenstack-novaSUSEOS Command Injection and Improper Input Validation in ansible7.3 Highopenstack-novaSUSElibxml as used in Nokogiri has an infinite loop in a certain end-of-file situation7.5 Highopenstack-novaSUSEVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...5.9 Mediumopenstack-novaSUSEImproper Verification of Cryptographic Signature in PySAML27.5 Highopenstack-novaSUSEUncontrolled Resource Consumption in Pillow7.5 Highopenstack-novaSUSEBuffer Copy without Checking Size of Input in Pillow9.8 Criticalopenstack-novaSUSEPCX P mode buffer overflow in Pillow9.8 Criticalopenstack-novaSUSEOut-of-bounds Read in Pillow7.1 Highopenstack-novaSUSEHTTP Request Smuggling in Waitress: Invalid whitespace characters in headers7.1 Highopenstack-novaSUSEHTTP Request Smuggling: Content-Length Sent Twice in Waitress7.1 Highopenstack-novaSUSEHTTP Request Smuggling: LF vs CRLF handling in Waitress7.1 Highopenstack-novaSUSEHTTP Request Smuggling: Invalid Transfer-Encoding in Waitress7.1 Highopenstack-novaSUSEDjango Potential account hijack via password reset form9.8 Criticalopenstack-novaSUSEInclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible5.7 Mediumopenstack-novaSUSEPotential DOS attack in Puma5.3 Mediumopenstack-novaSUSEAnsible password prompts could expose passwords6.4 Mediumopenstack-novaSUSEExposure of Sensitive Information to an Unauthorized Actor in ansible5.7 Mediumopenstack-novaSUSERabbitMQ Web Management Plugin DoS via heap overflow4.5 Mediumopenstack-novaSUSEDouble Free in psutil7.5 Highopenstack-novaSUSEVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....6.5 Mediumopenstack-novaSUSEVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...4.4 Mediumopenstack-novaSUSEHaml vulnerable to cross-site scripting6.1 Mediumopenstack-novaSUSEAnsible leaks sensitive information to logs when told not to7.3 Highopenstack-novaSUSEAnsible Uses Plugins That Disclose Credentials7.3 Highopenstack-novaSUSEOpenStack Octavia Amphora-Agent not requiring Client-Certificate9.1 Criticalopenstack-novaSUSEDOS attack in Pillow when processing specially crafted image files7.5 Highopenstack-novaSUSESecurity update for ansible1, ardana-ansible, ardana-cluster, ardana-db, ardana-extensions-nsx, ardana-glance, ardana-input-model, ardana-installer-ui, ardana-manila, ardana-monasca, ardana-neutron, a…No scoreopenstack-novaSUSEAnsible password prompts could expose passwords6.4 Mediumopenstack-novaSUSEIn Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This...7.5 High- Show moreLoading…