python-ovs vulnerabilities (SUSE)

15 vulnerabilities.

• python-ovs SUSE crowbar provision leaks admin password to all nodes in cleartext CVE-2018-17954 Fix available 9.3 CriticalFebruary 3, 2020
• python-ovs SUSE Potential DOS attack in Puma CVE-2019-16770 Fix available 5.3 MediumDecember 5, 2019
• python-ovs SUSE In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This... CVE-2019-15043 Public exploitFix available EPSS 63.4% 7.5 HighSeptember 3, 2019
• python-ovs SUSE Nokogiri Command Injection Vulnerability CVE-2019-5477 Fix available 9.8 CriticalAugust 16, 2019
• python-ovs SUSE python-engineio vulnerable to Cross-Site Request Forgery (CSRF) CVE-2019-13611 Fix available 8.8 HighJuly 15, 2019
• python-ovs SUSE Uninitialized read in Nokogiri gem CVE-2019-13117 Fix available 5.3 MediumJuly 1, 2019
• python-ovs SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported... CVE-2019-2628 Fix available 4.9 MediumApril 23, 2019
• python-ovs SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:... CVE-2019-2627 Fix available 4.9 MediumApril 23, 2019
• python-ovs SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).... CVE-2019-2614 Fix available 4.4 MediumApril 23, 2019
• python-ovs SUSE Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary... CVE-2018-19039 Fix available 6.5 MediumDecember 13, 2018
• python-ovs SUSE Paramiko Authentication Bypass vulnerability CVE-2018-1000805 Fix available 8.8 HighOctober 8, 2018
• python-ovs SUSE Security update for crowbar-core, crowbar-openstack, grafana, novnc, openstack-keystone, openstack-neutron, openstack-neutron-lbaas, openstack-nova, openstack-tempest, python-pysaml2, python-urllib3,… CVE-2018-558213 Fix availableRejected No scoreAugust 29, 2018
• python-ovs SUSE Grafana Authentication Bypass CVE-2018-15727 Public exploitFix available EPSS 64.3% 9.8 CriticalAugust 29, 2018
• python-ovs SUSE PySAML2 XML external entity attack CVE-2016-10127 Fix available 9.0 CriticalFebruary 27, 2017
• python-ovs SUSE rest-client allows local users to obtain sensitive information by reading the log CVE-2015-3448 Fix available 2.1 LowApril 29, 2015