venv-openstack-monasca-ceilometer vulnerabilities (SUSE)
178 vulnerabilities.
-
venv-openstack-monasca-ceilometerSUSE Cipher.update_into can corrupt memory in pyca cryptography 4.8 Medium -
venv-openstack-monasca-ceilometerSUSE OpenStack Cinder, glance, and Nova vulnerable to Path Traversal 5.7 Medium -
venv-openstack-monasca-ceilometerSUSE sinatra does not validate expanded path matches 7.5 High -
venv-openstack-monasca-ceilometerSUSE Infinite Loop in Django 7.5 High -
venv-openstack-monasca-ceilometerSUSE Cross-site Scripting in Django 6.1 Medium -
venv-openstack-monasca-ceilometerSUSE openstack-barbican Denial of Service vulnerability 4.9 Medium -
venv-openstack-monasca-ceilometerSUSE Barbican authorization flaw before v14.0.0 8.1 High -
venv-openstack-monasca-ceilometerSUSE A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. 8.8 High -
venv-openstack-monasca-ceilometerSUSE SQL injection in JDBC Appender in Apache Log4j V1 9.8 Critical -
venv-openstack-monasca-ceilometerSUSE Deserialization of untrusted data in JMSSink in Apache Log4j 1.x 8.8 High -
venv-openstack-monasca-ceilometerSUSE Arbitrary expression injection in Pillow 9.8 Critical -
venv-openstack-monasca-ceilometerSUSE Out-of-bounds Read in Pillow 6.5 Medium -
venv-openstack-monasca-ceilometerSUSE Improper Initialization in Pillow 6.5 Medium -
venv-openstack-monasca-ceilometerSUSE Directory-traversal in Django 5.3 Medium -
venv-openstack-monasca-ceilometerSUSE golang.org/x/net/http2 allows uncontrolled memory consumption 7.5 High -
venv-openstack-monasca-ceilometerSUSE Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 7.5 High -
venv-openstack-monasca-ceilometerSUSE HTML Cleaner allows crafted and SVG embedded scripts to pass through 8.2 High -
venv-openstack-monasca-ceilometerSUSE Directory Traversal in Grafana 4.3 Medium -
venv-openstack-monasca-ceilometerSUSE An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user... 6.1 Medium -
venv-openstack-monasca-ceilometerSUSE XSS in the `of` option of the `.position()` util 6.5 Medium -
venv-openstack-monasca-ceilometerSUSE XSS in `*Text` options of the Datepicker widget 6.5 Medium -
venv-openstack-monasca-ceilometerSUSE XSS in the `altField` option of the Datepicker widget 6.5 Medium -
venv-openstack-monasca-ceilometerSUSE Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma 3.7 Low -
venv-openstack-monasca-ceilometerSUSE OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value 6.5 Medium -
venv-openstack-monasca-ceilometerSUSE OpenStack Keystone allows information disclosure during account locking 7.5 High -
venv-openstack-monasca-ceilometerSUSE Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks 7.5 High -
venv-openstack-monasca-ceilometerSUSE Path Traversal in Django 4.9 Medium -
venv-openstack-monasca-ceilometerSUSE Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet 5.3 Medium -
venv-openstack-monasca-ceilometerSUSE Path Traversal in Django 7.5 High -
venv-openstack-monasca-ceilometerSUSE Directory Traversal in Django 5.3 Medium -
venv-openstack-monasca-ceilometerSUSE lxml vulnerable to Cross-Site Scripting 6.1 Medium -
venv-openstack-monasca-ceilometerSUSE Denial of service in Grafana 7.5 High -
venv-openstack-monasca-ceilometerSUSE Activerecord-session_store Vulnerable to Timing Attack 5.3 Medium -
venv-openstack-monasca-ceilometerSUSE Web Cache Poisoning 5.9 Medium -
venv-openstack-monasca-ceilometerSUSE Authentication Bypass in Apache Cassandra 7.5 High -
venv-openstack-monasca-ceilometerSUSE Open default xmlsec1 key-type preference 6.5 Medium -
venv-openstack-monasca-ceilometerSUSE SAML XML Signature wrapping 6.5 Medium -
venv-openstack-monasca-ceilometerSUSE Injection in Redcarpet 6.8 Medium -
venv-openstack-monasca-ceilometerSUSE XXE in Nokogiri 2.6 Low -
venv-openstack-monasca-ceilometerSUSE py vulnerable to Regular Expression Denial of Service 7.5 High -
venv-openstack-monasca-ceilometerSUSE lxml vulnerable to Cross-site Scripting 6.1 Medium -
venv-openstack-monasca-ceilometerSUSE Improper Authentication in InfluxDB 9.8 Critical -
venv-openstack-monasca-ceilometerSUSE Insufficiently random values in Ansible 5.5 Medium -
venv-openstack-monasca-ceilometerSUSE Grafana XSS via a query alias for the ElasticSearch datasource 6.1 Medium -
venv-openstack-monasca-ceilometerSUSE CRLF injection in urllib3 6.5 Medium -
venv-openstack-monasca-ceilometerSUSE Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible 5.5 Medium -
venv-openstack-monasca-ceilometerSUSE Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible 5.0 Medium -
venv-openstack-monasca-ceilometerSUSE Improper Verification of Cryptographic Signature in ansible 7.1 High -
venv-openstack-monasca-ceilometerSUSE Flask-Cors Directory Traversal vulnerability 7.5 High -
venv-openstack-monasca-ceilometerSUSE OpenStack Nova Live migration fails to update persistent domain XML 8.3 High - Show olderLoading…