python-pysaml2 vulnerabilities (SUSE)
72 vulnerabilities.
-
python-pysaml2SUSE Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks 7.5 High -
python-pysaml2SUSE Path Traversal in Django 4.9 Medium -
python-pysaml2SUSE Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet 5.3 Medium -
python-pysaml2SUSE Path Traversal in Django 7.5 High -
python-pysaml2SUSE Directory Traversal in Django 5.3 Medium -
python-pysaml2SUSE Denial of service in Grafana 7.5 High -
python-pysaml2SUSE Activerecord-session_store Vulnerable to Timing Attack 5.3 Medium -
python-pysaml2SUSE Web Cache Poisoning 5.9 Medium -
python-pysaml2SUSE Authentication Bypass in Apache Cassandra 7.5 High -
python-pysaml2SUSE Open default xmlsec1 key-type preference 6.5 Medium -
python-pysaml2SUSE SAML XML Signature wrapping 6.5 Medium -
python-pysaml2SUSE XXE in Nokogiri 2.6 Low -
python-pysaml2SUSE py vulnerable to Regular Expression Denial of Service 7.5 High -
python-pysaml2SUSE Improper Authentication in InfluxDB 9.8 Critical -
python-pysaml2SUSE Grafana XSS via a query alias for the ElasticSearch datasource 6.1 Medium -
python-pysaml2SUSE CRLF injection in urllib3 6.5 Medium -
python-pysaml2SUSE Grafana stored XSS 5.4 Medium -
python-pysaml2SUSE It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in... 4.3 Medium -
python-pysaml2SUSE Server Side Request Forgery in Grafana 8.2 High -
python-pysaml2SUSE XSS in Django 6.1 Medium -
python-pysaml2SUSE Data leakage via cache key collision in Django 5.9 Medium -
python-pysaml2SUSE Grafana XSS via adding a link in General feature 6.1 Medium -
python-pysaml2SUSE Grafana XSS via a column style 6.1 Medium -
python-pysaml2SUSE Grafana XSS in Dashboard Text Panel 6.1 Medium -
python-pysaml2SUSE HTTP Smuggling via Transfer-Encoding Header in Puma 6.8 Medium -
python-pysaml2SUSE HTTP Smuggling via Transfer-Encoding Header in Puma 7.5 High -
python-pysaml2SUSE Information disclosure issue in Active Resource 7.5 High -
python-pysaml2SUSE Grafana version < 6.7.3 is vulnerable for annotation popup XSS. 6.1 Medium -
python-pysaml2SUSE Unsafe object creation in json RubyGem 7.5 High -
python-pysaml2SUSE HTTP Response Splitting in Puma 6.5 Medium -
python-pysaml2SUSE Improper Verification of Cryptographic Signature in PySAML2 7.5 High -
python-pysaml2SUSE Uncontrolled Resource Consumption in Pillow 7.5 High -
python-pysaml2SUSE PCX P mode buffer overflow in Pillow 9.8 Critical -
python-pysaml2SUSE Out-of-bounds Read in Pillow 7.1 High -
python-pysaml2SUSE HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers 7.1 High -
python-pysaml2SUSE HTTP Request Smuggling: Content-Length Sent Twice in Waitress 7.1 High -
python-pysaml2SUSE HTTP Request Smuggling: LF vs CRLF handling in Waitress 7.1 High -
python-pysaml2SUSE HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress 7.1 High -
python-pysaml2SUSE Django Potential account hijack via password reset form 9.8 Critical -
python-pysaml2SUSE Double Free in psutil 7.5 High -
python-pysaml2SUSE Haml vulnerable to cross-site scripting 6.1 Medium -
python-pysaml2SUSE DOS attack in Pillow when processing specially crafted image files 7.5 High -
python-pysaml2SUSE In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This... 7.5 High -
python-pysaml2SUSE memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str... 7.5 High -
python-pysaml2SUSE Nokogiri Command Injection Vulnerability 9.8 Critical -
python-pysaml2SUSE Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage 7.5 High -
python-pysaml2SUSE python-engineio vulnerable to Cross-Site Request Forgery (CSRF) 8.8 High -
python-pysaml2SUSE Access control bypass in Apache ZooKeeper 5.9 Medium -
python-pysaml2SUSE In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru... 7.5 High -
python-pysaml2SUSE Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported... 4.9 Medium - Show olderLoading…