release-notes-suse-openstack-cloud vulnerabilities (SUSE)
123 vulnerabilities.
release-notes-suse-openstack-cloudSUSECode Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible7.9 Highrelease-notes-suse-openstack-cloudSUSEArgument Injection in Ansible3.9 Lowrelease-notes-suse-openstack-cloudSUSEExposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible3.9 Lowrelease-notes-suse-openstack-cloudSUSEPath Traversal in Ansible4.2 Mediumrelease-notes-suse-openstack-cloudSUSEIncorrect Permission Assignment for Critical Resource in Ansible2.2 Lowrelease-notes-suse-openstack-cloudSUSEInsertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible5.0 Mediumrelease-notes-suse-openstack-cloudSUSEExposure of Sensitive Information to an Unauthorized Actor in Ansible3.9 Lowrelease-notes-suse-openstack-cloudSUSEAnsible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File5.0 Mediumrelease-notes-suse-openstack-cloudSUSEOpenStack Manila Unprivileged users can retrieve, use and manipulate share networks8.3 Highrelease-notes-suse-openstack-cloudSUSEPath Traversal in Ansible7.5 Highrelease-notes-suse-openstack-cloudSUSESQL injection in Django8.8 Highrelease-notes-suse-openstack-cloudSUSEOS Command Injection in ansible7.4 Highrelease-notes-suse-openstack-cloudSUSEHTTP Response Splitting in Puma6.5 Mediumrelease-notes-suse-openstack-cloudSUSESQL injection in Django9.8 Criticalrelease-notes-suse-openstack-cloudSUSEExternally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible7.3 Highrelease-notes-suse-openstack-cloudSUSEOS Command Injection and Improper Input Validation in ansible7.3 Highrelease-notes-suse-openstack-cloudSUSEImproper Verification of Cryptographic Signature in PySAML27.5 Highrelease-notes-suse-openstack-cloudSUSEUncontrolled Resource Consumption in Pillow7.5 Highrelease-notes-suse-openstack-cloudSUSEBuffer Copy without Checking Size of Input in Pillow9.8 Criticalrelease-notes-suse-openstack-cloudSUSEPCX P mode buffer overflow in Pillow9.8 Criticalrelease-notes-suse-openstack-cloudSUSEOut-of-bounds Read in Pillow7.1 Highrelease-notes-suse-openstack-cloudSUSEHTTP Request Smuggling in Waitress: Invalid whitespace characters in headers7.1 Highrelease-notes-suse-openstack-cloudSUSEHTTP Request Smuggling: Content-Length Sent Twice in Waitress7.1 Highrelease-notes-suse-openstack-cloudSUSEHTTP Request Smuggling: LF vs CRLF handling in Waitress7.1 Highrelease-notes-suse-openstack-cloudSUSEHTTP Request Smuggling: Invalid Transfer-Encoding in Waitress7.1 Highrelease-notes-suse-openstack-cloudSUSEDjango Potential account hijack via password reset form9.8 Criticalrelease-notes-suse-openstack-cloudSUSEInclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible5.7 Mediumrelease-notes-suse-openstack-cloudSUSEAnsible password prompts could expose passwords6.4 Mediumrelease-notes-suse-openstack-cloudSUSEExposure of Sensitive Information to an Unauthorized Actor in ansible5.7 Mediumrelease-notes-suse-openstack-cloudSUSEDouble Free in psutil7.5 Highrelease-notes-suse-openstack-cloudSUSEAnsible leaks sensitive information to logs when told not to7.3 Highrelease-notes-suse-openstack-cloudSUSEAnsible Uses Plugins That Disclose Credentials7.3 Highrelease-notes-suse-openstack-cloudSUSEOpenStack Octavia Amphora-Agent not requiring Client-Certificate9.1 Criticalrelease-notes-suse-openstack-cloudSUSEDOS attack in Pillow when processing specially crafted image files7.5 Highrelease-notes-suse-openstack-cloudSUSEAnsible password prompts could expose passwords6.4 Mediumrelease-notes-suse-openstack-cloudSUSEIn Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This...7.5 Highrelease-notes-suse-openstack-cloudSUSEmemcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str...7.5 Highrelease-notes-suse-openstack-cloudSUSENokogiri Command Injection Vulnerability9.8 Criticalrelease-notes-suse-openstack-cloudSUSEDeserialization of Untrusted Data in Apache Storm9.8 Criticalrelease-notes-suse-openstack-cloudSUSEExposure of Sensitive Information in Apache Storm Logviewer7.5 Highrelease-notes-suse-openstack-cloudSUSEExposure of Sensitive Information to an Unauthorized Actor in ansible4.6 Mediumrelease-notes-suse-openstack-cloudSUSEpython-engineio vulnerable to Cross-Site Request Forgery (CSRF)8.8 Highrelease-notes-suse-openstack-cloudSUSEAccess control bypass in Apache ZooKeeper5.9 Mediumrelease-notes-suse-openstack-cloudSUSEIn memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru...7.5 Highrelease-notes-suse-openstack-cloudSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...4.9 Mediumrelease-notes-suse-openstack-cloudSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...4.9 Mediumrelease-notes-suse-openstack-cloudSUSEVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....4.4 Mediumrelease-notes-suse-openstack-cloudSUSEJinja2 sandbox escape vulnerability8.6 Highrelease-notes-suse-openstack-cloudSUSEJinja2 sandbox escape via string formatting8.6 Highrelease-notes-suse-openstack-cloudSUSEAnsible Path Traversal vulnerability4.2 Medium- Show moreLoading…