venv-openstack-horizon vulnerabilities (SUSE)
187 vulnerabilities.
venv-openstack-horizonSUSElxml vulnerable to Cross-site Scripting6.1 Mediumvenv-openstack-horizonSUSEImproper Authentication in InfluxDB9.8 Criticalvenv-openstack-horizonSUSEInsufficiently random values in Ansible5.5 Mediumvenv-openstack-horizonSUSEGrafana XSS via a query alias for the ElasticSearch datasource6.1 Mediumvenv-openstack-horizonSUSECRLF injection in urllib36.5 Mediumvenv-openstack-horizonSUSEInsertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible5.5 Mediumvenv-openstack-horizonSUSEImproper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible5.0 Mediumvenv-openstack-horizonSUSEImproper Verification of Cryptographic Signature in ansible7.1 Highvenv-openstack-horizonSUSEFlask-Cors Directory Traversal vulnerability7.5 Highvenv-openstack-horizonSUSEOpenStack Nova Live migration fails to update persistent domain XML8.3 Highvenv-openstack-horizonSUSEGrafana stored XSS5.4 Mediumvenv-openstack-horizonSUSEIt was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in...4.3 Mediumvenv-openstack-horizonSUSEOut-of-bounds reads in Pillow5.5 Mediumvenv-openstack-horizonSUSEOut-of-bounds read in Pillow8.1 Highvenv-openstack-horizonSUSEOut-of-bounds reads in Pillow5.5 Mediumvenv-openstack-horizonSUSEOut-of-bounds read in Pillow5.5 Mediumvenv-openstack-horizonSUSERack allows Percent-encoded cookies to overwrite existing prefixed cookie names7.5 Highvenv-openstack-horizonSUSEOpenstack cinder Improper handling of ScaleIO backend credentials6.5 Mediumvenv-openstack-horizonSUSEServer Side Request Forgery in Grafana8.2 Highvenv-openstack-horizonSUSEXSS in Django6.1 Mediumvenv-openstack-horizonSUSEData leakage via cache key collision in Django5.9 Mediumvenv-openstack-horizonSUSEGrafana XSS via adding a link in General feature6.1 Mediumvenv-openstack-horizonSUSEGrafana XSS via a column style6.1 Mediumvenv-openstack-horizonSUSEGrafana XSS in Dashboard Text Panel6.1 Mediumvenv-openstack-horizonSUSEHTTP Smuggling via Transfer-Encoding Header in Puma6.8 Mediumvenv-openstack-horizonSUSEHTTP Smuggling via Transfer-Encoding Header in Puma7.5 Highvenv-openstack-horizonSUSEExposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible5.0 Mediumvenv-openstack-horizonSUSEExposure of Sensitive Information to an Unauthorized Actor in ansible5.0 Mediumvenv-openstack-horizonSUSEInformation disclosure issue in Active Resource7.5 Highvenv-openstack-horizonSUSEExposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible5.0 Mediumvenv-openstack-horizonSUSEPath Traversal in Ansible5.2 Mediumvenv-openstack-horizonSUSEGrafana version < 6.7.3 is vulnerable for annotation popup XSS.6.1 Mediumvenv-openstack-horizonSUSEUnsafe object creation in json RubyGem7.5 Highvenv-openstack-horizonSUSECode Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible7.9 Highvenv-openstack-horizonSUSEArgument Injection in Ansible3.9 Lowvenv-openstack-horizonSUSEExposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible3.9 Lowvenv-openstack-horizonSUSEPath Traversal in Ansible4.2 Mediumvenv-openstack-horizonSUSEIncorrect Permission Assignment for Critical Resource in Ansible2.2 Lowvenv-openstack-horizonSUSEInsertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible5.0 Mediumvenv-openstack-horizonSUSEExposure of Sensitive Information to an Unauthorized Actor in Ansible3.9 Lowvenv-openstack-horizonSUSEAnsible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File5.0 Mediumvenv-openstack-horizonSUSEOpenStack Manila Unprivileged users can retrieve, use and manipulate share networks8.3 Highvenv-openstack-horizonSUSEPath Traversal in Ansible7.5 Highvenv-openstack-horizonSUSESQL injection in Django8.8 Highvenv-openstack-horizonSUSEOS Command Injection in ansible7.4 Highvenv-openstack-horizonSUSEHTTP Response Splitting in Puma6.5 Mediumvenv-openstack-horizonSUSEmysql-systemd-helper allows setting 640 permissions of arbitrary files5.1 Mediumvenv-openstack-horizonSUSEcrowbar provision leaks admin password to all nodes in cleartext9.3 Criticalvenv-openstack-horizonSUSESQL injection in Django9.8 Criticalvenv-openstack-horizonSUSEExternally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible7.3 High- Show moreLoading…