python-elementpath vulnerabilities (SUSE)
26 vulnerabilities.
-
python-elementpathSUSE Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks 7.5 High -
python-elementpathSUSE Path Traversal in Django 4.9 Medium -
python-elementpathSUSE Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet 5.3 Medium -
python-elementpathSUSE Path Traversal in Django 7.5 High -
python-elementpathSUSE Directory Traversal in Django 5.3 Medium -
python-elementpathSUSE Denial of service in Grafana 7.5 High -
python-elementpathSUSE Activerecord-session_store Vulnerable to Timing Attack 5.3 Medium -
python-elementpathSUSE Web Cache Poisoning 5.9 Medium -
python-elementpathSUSE Authentication Bypass in Apache Cassandra 7.5 High -
python-elementpathSUSE Open default xmlsec1 key-type preference 6.5 Medium -
python-elementpathSUSE SAML XML Signature wrapping 6.5 Medium -
python-elementpathSUSE XXE in Nokogiri 2.6 Low -
python-elementpathSUSE py vulnerable to Regular Expression Denial of Service 7.5 High -
python-elementpathSUSE Grafana XSS via a query alias for the ElasticSearch datasource 6.1 Medium -
python-elementpathSUSE Grafana stored XSS 5.4 Medium -
python-elementpathSUSE It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in... 4.3 Medium -
python-elementpathSUSE Server Side Request Forgery in Grafana 8.2 High -
python-elementpathSUSE Grafana XSS via adding a link in General feature 6.1 Medium -
python-elementpathSUSE Grafana XSS via a column style 6.1 Medium -
python-elementpathSUSE Grafana XSS in Dashboard Text Panel 6.1 Medium -
python-elementpathSUSE Grafana version < 6.7.3 is vulnerable for annotation popup XSS. 6.1 Medium -
python-elementpathSUSE In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This... 7.5 High -
python-elementpathSUSE Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary... 6.5 Medium -
python-elementpathSUSE Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL... 6.1 Medium -
python-elementpathSUSE Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0,... 7.5 High -
python-elementpathSUSE QOS.ch Logback vulnerable to Deserialization of Untrusted Data 9.8 Critical