openstack-trove vulnerabilities (SUSE)

22 vulnerabilities.

• openstack-trove SUSE mysql-systemd-helper allows setting 640 permissions of arbitrary files CVE-2019-18901 5.1 MediumFebruary 26, 2020
• openstack-trove SUSE crowbar provision leaks admin password to all nodes in cleartext CVE-2018-17954 9.3 CriticalFebruary 3, 2020
• openstack-trove SUSE libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation CVE-2020-7595 Fix available 7.5 HighJanuary 21, 2020
• openstack-trove SUSE Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions... CVE-2020-2574 Fix available 5.9 MediumJanuary 15, 2020
• openstack-trove SUSE Potential DOS attack in Puma CVE-2019-16770 Fix available 5.3 MediumDecember 5, 2019
• openstack-trove SUSE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).... CVE-2019-2974 Fix available 6.5 MediumOctober 16, 2019
• openstack-trove SUSE Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions... CVE-2019-2938 Fix available 4.4 MediumOctober 16, 2019
• openstack-trove SUSE Haml vulnerable to cross-site scripting CVE-2017-1002201 Fix available 6.1 MediumOctober 15, 2019
• openstack-trove SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser).... CVE-2019-2805 Fix available 6.5 MediumJuly 19, 2019
• openstack-trove SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported... CVE-2019-2758 Fix available 5.5 MediumJuly 19, 2019
• openstack-trove SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML).... CVE-2019-2740 Fix available 6.5 MediumJuly 19, 2019
• openstack-trove SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:... CVE-2019-2739 Fix available 5.1 MediumJuly 19, 2019
• openstack-trove SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable... CVE-2019-2737 Fix available 4.9 MediumJuly 19, 2019
• openstack-trove SUSE Uninitialized read in Nokogiri gem CVE-2019-13117 Fix available 5.3 MediumJuly 1, 2019
• openstack-trove SUSE Nokogiri vulnerable to libxslt protection mechanism bypass CVE-2019-11068 Fix available 9.8 CriticalApril 10, 2019
• openstack-trove SUSE OpenStack Neutron overlapping security group rules prevents compute node network configuration CVE-2019-10876 Fix available 6.5 MediumApril 5, 2019
• openstack-trove SUSE Uncontrolled Memory Consumption in Django CVE-2019-6975 Fix available 7.5 HighFebruary 11, 2019
• openstack-trove SUSE Improper Input Validation in Django CVE-2019-3498 Fix available 6.5 MediumJanuary 6, 2019
• openstack-trove SUSE Django open redirect CVE-2018-14574 Fix available EPSS 25.5% 6.1 MediumAugust 1, 2018
• openstack-trove SUSE In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an... CVE-2018-14432 Fix available 5.3 MediumJuly 31, 2018
• openstack-trove SUSE OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor CVE-2016-4985 Fix available 7.5 HighJuly 12, 2016
• openstack-trove SUSE Openstack DBaaS (Trove) Improper Link Resolution Before File Access CVE-2015-3156 Fix available 5.5 MediumMarch 14, 2016