venv-openstack-magnum vulnerabilities (SUSE)
182 vulnerabilities.
venv-openstack-magnumSUSEInformation leak in api7.4 Highvenv-openstack-magnumSUSEWerkzeug may allow high resource usage when parsing multipart form data with many fields7.5 Highvenv-openstack-magnumSUSECipher.update_into can corrupt memory in pyca cryptography4.8 Mediumvenv-openstack-magnumSUSEOpenStack Cinder, glance, and Nova vulnerable to Path Traversal5.7 Mediumvenv-openstack-magnumSUSEOpenStack Swift XML external entities (XXE) Injection6.5 Mediumvenv-openstack-magnumSUSEsinatra does not validate expanded path matches7.5 Highvenv-openstack-magnumSUSEInfinite Loop in Django7.5 Highvenv-openstack-magnumSUSECross-site Scripting in Django6.1 Mediumvenv-openstack-magnumSUSEopenstack-barbican Denial of Service vulnerability4.9 Mediumvenv-openstack-magnumSUSEBarbican authorization flaw before v14.0.08.1 Highvenv-openstack-magnumSUSEA deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.8.8 Highvenv-openstack-magnumSUSESQL injection in JDBC Appender in Apache Log4j V19.8 Criticalvenv-openstack-magnumSUSEDeserialization of untrusted data in JMSSink in Apache Log4j 1.x8.8 Highvenv-openstack-magnumSUSEArbitrary expression injection in Pillow9.8 Criticalvenv-openstack-magnumSUSEOut-of-bounds Read in Pillow6.5 Mediumvenv-openstack-magnumSUSEImproper Initialization in Pillow6.5 Mediumvenv-openstack-magnumSUSEDirectory-traversal in Django5.3 Mediumvenv-openstack-magnumSUSEgolang.org/x/net/http2 allows uncontrolled memory consumption7.5 Highvenv-openstack-magnumSUSEDeserialization of untrusted data in JMSAppender in Apache Log4j 1.27.5 Highvenv-openstack-magnumSUSEHTML Cleaner allows crafted and SVG embedded scripts to pass through8.2 Highvenv-openstack-magnumSUSEDirectory Traversal in Grafana4.3 Mediumvenv-openstack-magnumSUSEAn open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user...6.1 Mediumvenv-openstack-magnumSUSEXSS in the `of` option of the `.position()` util6.5 Mediumvenv-openstack-magnumSUSEXSS in `*Text` options of the Datepicker widget6.5 Mediumvenv-openstack-magnumSUSEXSS in the `altField` option of the Datepicker widget6.5 Mediumvenv-openstack-magnumSUSEInconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma3.7 Lowvenv-openstack-magnumSUSEOpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value6.5 Mediumvenv-openstack-magnumSUSEOpenStack Keystone allows information disclosure during account locking7.5 Highvenv-openstack-magnumSUSEDjango Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks7.5 Highvenv-openstack-magnumSUSEPath Traversal in Django4.9 Mediumvenv-openstack-magnumSUSEImproper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet5.3 Mediumvenv-openstack-magnumSUSEPath Traversal in Django7.5 Highvenv-openstack-magnumSUSEDirectory Traversal in Django5.3 Mediumvenv-openstack-magnumSUSElxml vulnerable to Cross-Site Scripting6.1 Mediumvenv-openstack-magnumSUSEDenial of service in Grafana7.5 Highvenv-openstack-magnumSUSEActiverecord-session_store Vulnerable to Timing Attack5.3 Mediumvenv-openstack-magnumSUSEWeb Cache Poisoning5.9 Mediumvenv-openstack-magnumSUSEAuthentication Bypass in Apache Cassandra7.5 Highvenv-openstack-magnumSUSEOpen default xmlsec1 key-type preference6.5 Mediumvenv-openstack-magnumSUSESAML XML Signature wrapping6.5 Mediumvenv-openstack-magnumSUSEInjection in Redcarpet6.8 Mediumvenv-openstack-magnumSUSEXXE in Nokogiri2.6 Lowvenv-openstack-magnumSUSEpy vulnerable to Regular Expression Denial of Service7.5 Highvenv-openstack-magnumSUSElxml vulnerable to Cross-site Scripting6.1 Mediumvenv-openstack-magnumSUSEImproper Authentication in InfluxDB9.8 Criticalvenv-openstack-magnumSUSEInsufficiently random values in Ansible5.5 Mediumvenv-openstack-magnumSUSEGrafana XSS via a query alias for the ElasticSearch datasource6.1 Mediumvenv-openstack-magnumSUSECRLF injection in urllib36.5 Mediumvenv-openstack-magnumSUSEInsertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible5.5 Mediumvenv-openstack-magnumSUSEImproper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible5.0 Medium- Show olderLoading…