rubygem-activerecord-session_store vulnerabilities (SUSE)
27 vulnerabilities.
-
rubygem-activerecord-session_storeSUSE Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks 7.5 High -
rubygem-activerecord-session_storeSUSE Path Traversal in Django 4.9 Medium -
rubygem-activerecord-session_storeSUSE Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet 5.3 Medium -
rubygem-activerecord-session_storeSUSE Path Traversal in Django 7.5 High -
rubygem-activerecord-session_storeSUSE Directory Traversal in Django 5.3 Medium -
rubygem-activerecord-session_storeSUSE Denial of service in Grafana 7.5 High -
rubygem-activerecord-session_storeSUSE Activerecord-session_store Vulnerable to Timing Attack 5.3 Medium -
rubygem-activerecord-session_storeSUSE Web Cache Poisoning 5.9 Medium -
rubygem-activerecord-session_storeSUSE Authentication Bypass in Apache Cassandra 7.5 High -
rubygem-activerecord-session_storeSUSE Django Directory Traversal via archive.extract 5.3 Medium -
rubygem-activerecord-session_storeSUSE Open default xmlsec1 key-type preference 6.5 Medium -
rubygem-activerecord-session_storeSUSE SAML XML Signature wrapping 6.5 Medium -
rubygem-activerecord-session_storeSUSE XXE in Nokogiri 2.6 Low -
rubygem-activerecord-session_storeSUSE py vulnerable to Regular Expression Denial of Service 7.5 High -
rubygem-activerecord-session_storeSUSE Grafana XSS via a query alias for the ElasticSearch datasource 6.1 Medium -
rubygem-activerecord-session_storeSUSE Grafana stored XSS 5.4 Medium -
rubygem-activerecord-session_storeSUSE It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in... 4.3 Medium -
rubygem-activerecord-session_storeSUSE Server Side Request Forgery in Grafana 8.2 High -
rubygem-activerecord-session_storeSUSE Grafana XSS via adding a link in General feature 6.1 Medium -
rubygem-activerecord-session_storeSUSE Grafana XSS via a column style 6.1 Medium -
rubygem-activerecord-session_storeSUSE Grafana XSS in Dashboard Text Panel 6.1 Medium -
rubygem-activerecord-session_storeSUSE Grafana version < 6.7.3 is vulnerable for annotation popup XSS. 6.1 Medium -
rubygem-activerecord-session_storeSUSE In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This... 7.5 High -
rubygem-activerecord-session_storeSUSE Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary... 6.5 Medium -
rubygem-activerecord-session_storeSUSE Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL... 6.1 Medium -
rubygem-activerecord-session_storeSUSE Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0,... 7.5 High -
rubygem-activerecord-session_storeSUSE QOS.ch Logback vulnerable to Deserialization of Untrusted Data 9.8 Critical