storm vulnerabilities (SUSE)
82 vulnerabilities.
-
stormSUSE A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. 8.8 High -
stormSUSE SQL injection in JDBC Appender in Apache Log4j V1 9.8 Critical -
stormSUSE Deserialization of untrusted data in JMSSink in Apache Log4j 1.x 8.8 High -
stormSUSE Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 7.5 High -
stormSUSE Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints 10.0 Critical -
stormSUSE Insufficiently random values in Ansible 5.5 Medium -
stormSUSE CRLF injection in urllib3 6.5 Medium -
stormSUSE Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible 5.5 Medium -
stormSUSE Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible 5.0 Medium -
stormSUSE Improper Verification of Cryptographic Signature in ansible 7.1 High -
stormSUSE Flask-Cors Directory Traversal vulnerability 7.5 High -
stormSUSE OpenStack Nova Live migration fails to update persistent domain XML 8.3 High -
stormSUSE Grafana stored XSS 5.4 Medium -
stormSUSE It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in... 4.3 Medium -
stormSUSE Out-of-bounds reads in Pillow 5.5 Medium -
stormSUSE Out-of-bounds reads in Pillow 5.5 Medium -
stormSUSE Out-of-bounds read in Pillow 5.5 Medium -
stormSUSE Server Side Request Forgery in Grafana 8.2 High -
stormSUSE XSS in Django 6.1 Medium -
stormSUSE Data leakage via cache key collision in Django 5.9 Medium -
stormSUSE Grafana XSS via adding a link in General feature 6.1 Medium -
stormSUSE Grafana XSS via a column style 6.1 Medium -
stormSUSE Grafana XSS in Dashboard Text Panel 6.1 Medium -
stormSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 6.8 Medium -
stormSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 7.5 High -
stormSUSE Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible 5.0 Medium -
stormSUSE Exposure of Sensitive Information to an Unauthorized Actor in ansible 5.0 Medium -
stormSUSE Information disclosure issue in Active Resource 7.5 High -
stormSUSE Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible 5.0 Medium -
stormSUSE Path Traversal in Ansible 5.2 Medium -
stormSUSE Grafana version < 6.7.3 is vulnerable for annotation popup XSS. 6.1 Medium -
stormSUSE Unsafe object creation in json RubyGem 7.5 High -
stormSUSE Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible 7.9 High -
stormSUSE Argument Injection in Ansible 3.9 Low -
stormSUSE Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible 3.9 Low -
stormSUSE Path Traversal in Ansible 4.2 Medium -
stormSUSE Incorrect Permission Assignment for Critical Resource in Ansible 2.2 Low -
stormSUSE Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible 5.0 Medium -
stormSUSE Exposure of Sensitive Information to an Unauthorized Actor in Ansible 3.9 Low -
stormSUSE Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File 5.0 Medium -
stormSUSE Path Traversal in Ansible 7.5 High -
stormSUSE SQL injection in Django 8.8 High -
stormSUSE OS Command Injection in ansible 7.4 High -
stormSUSE crowbar provision leaks admin password to all nodes in cleartext 9.3 Critical -
stormSUSE SQL injection in Django 9.8 Critical -
stormSUSE Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible 7.3 High -
stormSUSE OS Command Injection and Improper Input Validation in ansible 7.3 High -
stormSUSE Improper Verification of Cryptographic Signature in PySAML2 7.5 High -
stormSUSE Uncontrolled Resource Consumption in Pillow 7.5 High -
stormSUSE PCX P mode buffer overflow in Pillow 9.8 Critical - Show olderLoading…