release-notes-suse-openstack-cloud vulnerabilities (SUSE)
123 vulnerabilities.
-
release-notes-suse-openstack-cloudSUSE sinatra does not validate expanded path matches 7.5 High -
release-notes-suse-openstack-cloudSUSE openstack-barbican Denial of Service vulnerability 4.9 Medium -
release-notes-suse-openstack-cloudSUSE Barbican authorization flaw before v14.0.0 8.1 High -
release-notes-suse-openstack-cloudSUSE Arbitrary expression injection in Pillow 9.8 Critical -
release-notes-suse-openstack-cloudSUSE Out-of-bounds Read in Pillow 6.5 Medium -
release-notes-suse-openstack-cloudSUSE Improper Initialization in Pillow 6.5 Medium -
release-notes-suse-openstack-cloudSUSE golang.org/x/net/http2 allows uncontrolled memory consumption 7.5 High -
release-notes-suse-openstack-cloudSUSE HTML Cleaner allows crafted and SVG embedded scripts to pass through 8.2 High -
release-notes-suse-openstack-cloudSUSE Directory Traversal in Grafana 4.3 Medium -
release-notes-suse-openstack-cloudSUSE XSS in the `of` option of the `.position()` util 6.5 Medium -
release-notes-suse-openstack-cloudSUSE XSS in `*Text` options of the Datepicker widget 6.5 Medium -
release-notes-suse-openstack-cloudSUSE XSS in the `altField` option of the Datepicker widget 6.5 Medium -
release-notes-suse-openstack-cloudSUSE OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value 6.5 Medium -
release-notes-suse-openstack-cloudSUSE OpenStack Keystone allows information disclosure during account locking 7.5 High -
release-notes-suse-openstack-cloudSUSE lxml vulnerable to Cross-Site Scripting 6.1 Medium -
release-notes-suse-openstack-cloudSUSE Django Directory Traversal via archive.extract 5.3 Medium -
release-notes-suse-openstack-cloudSUSE OpenStack Horizon Open redirect in workflow forms 6.1 Medium -
release-notes-suse-openstack-cloudSUSE lxml vulnerable to Cross-site Scripting 6.1 Medium -
release-notes-suse-openstack-cloudSUSE Improper Authentication in InfluxDB 9.8 Critical -
release-notes-suse-openstack-cloudSUSE Insufficiently random values in Ansible 5.5 Medium -
release-notes-suse-openstack-cloudSUSE Grafana XSS via a query alias for the ElasticSearch datasource 6.1 Medium -
release-notes-suse-openstack-cloudSUSE CRLF injection in urllib3 6.5 Medium -
release-notes-suse-openstack-cloudSUSE Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible 5.5 Medium -
release-notes-suse-openstack-cloudSUSE Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible 5.0 Medium -
release-notes-suse-openstack-cloudSUSE Improper Verification of Cryptographic Signature in ansible 7.1 High -
release-notes-suse-openstack-cloudSUSE Flask-Cors Directory Traversal vulnerability 7.5 High -
release-notes-suse-openstack-cloudSUSE OpenStack Nova Live migration fails to update persistent domain XML 8.3 High -
release-notes-suse-openstack-cloudSUSE Grafana stored XSS 5.4 Medium -
release-notes-suse-openstack-cloudSUSE It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in... 4.3 Medium -
release-notes-suse-openstack-cloudSUSE Out-of-bounds reads in Pillow 5.5 Medium -
release-notes-suse-openstack-cloudSUSE Out-of-bounds read in Pillow 8.1 High -
release-notes-suse-openstack-cloudSUSE Out-of-bounds reads in Pillow 5.5 Medium -
release-notes-suse-openstack-cloudSUSE Out-of-bounds read in Pillow 5.5 Medium -
release-notes-suse-openstack-cloudSUSE Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names 7.5 High -
release-notes-suse-openstack-cloudSUSE Openstack cinder Improper handling of ScaleIO backend credentials 6.5 Medium -
release-notes-suse-openstack-cloudSUSE Server Side Request Forgery in Grafana 8.2 High -
release-notes-suse-openstack-cloudSUSE XSS in Django 6.1 Medium -
release-notes-suse-openstack-cloudSUSE Data leakage via cache key collision in Django 5.9 Medium -
release-notes-suse-openstack-cloudSUSE Grafana XSS via adding a link in General feature 6.1 Medium -
release-notes-suse-openstack-cloudSUSE Grafana XSS via a column style 6.1 Medium -
release-notes-suse-openstack-cloudSUSE Grafana XSS in Dashboard Text Panel 6.1 Medium -
release-notes-suse-openstack-cloudSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 6.8 Medium -
release-notes-suse-openstack-cloudSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 7.5 High -
release-notes-suse-openstack-cloudSUSE Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible 5.0 Medium -
release-notes-suse-openstack-cloudSUSE Exposure of Sensitive Information to an Unauthorized Actor in ansible 5.0 Medium -
release-notes-suse-openstack-cloudSUSE Information disclosure issue in Active Resource 7.5 High -
release-notes-suse-openstack-cloudSUSE Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible 5.0 Medium -
release-notes-suse-openstack-cloudSUSE Path Traversal in Ansible 5.2 Medium -
release-notes-suse-openstack-cloudSUSE Grafana version < 6.7.3 is vulnerable for annotation popup XSS. 6.1 Medium -
release-notes-suse-openstack-cloudSUSE Unsafe object creation in json RubyGem 7.5 High - Show olderLoading…