venv-openstack-murano vulnerabilities (SUSE)
148 vulnerabilities.
-
venv-openstack-muranoSUSE Cipher.update_into can corrupt memory in pyca cryptography 4.8 Medium -
venv-openstack-muranoSUSE OpenStack Cinder, glance, and Nova vulnerable to Path Traversal 5.7 Medium -
venv-openstack-muranoSUSE Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection 9.8 Critical -
venv-openstack-muranoSUSE SQL Injection in Django 9.8 Critical -
venv-openstack-muranoSUSE HTTP Request Smuggling in puma 9.1 Critical -
venv-openstack-muranoSUSE Infinite Loop in Django 7.5 High -
venv-openstack-muranoSUSE Cross-site Scripting in Django 6.1 Medium -
venv-openstack-muranoSUSE A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. 8.8 High -
venv-openstack-muranoSUSE SQL injection in JDBC Appender in Apache Log4j V1 9.8 Critical -
venv-openstack-muranoSUSE Deserialization of untrusted data in JMSSink in Apache Log4j 1.x 8.8 High -
venv-openstack-muranoSUSE Directory-traversal in Django 5.3 Medium -
venv-openstack-muranoSUSE golang.org/x/net/http2 allows uncontrolled memory consumption 7.5 High -
venv-openstack-muranoSUSE Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 7.5 High -
venv-openstack-muranoSUSE Snapshot authentication bypass in grafana 9.8 Critical -
venv-openstack-muranoSUSE Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks 7.5 High -
venv-openstack-muranoSUSE Path Traversal in Django 4.9 Medium -
venv-openstack-muranoSUSE Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet 5.3 Medium -
venv-openstack-muranoSUSE Path Traversal in Django 7.5 High -
venv-openstack-muranoSUSE Directory Traversal in Django 5.3 Medium -
venv-openstack-muranoSUSE Denial of service in Grafana 7.5 High -
venv-openstack-muranoSUSE Activerecord-session_store Vulnerable to Timing Attack 5.3 Medium -
venv-openstack-muranoSUSE Web Cache Poisoning 5.9 Medium -
venv-openstack-muranoSUSE Authentication Bypass in Apache Cassandra 7.5 High -
venv-openstack-muranoSUSE Open default xmlsec1 key-type preference 6.5 Medium -
venv-openstack-muranoSUSE SAML XML Signature wrapping 6.5 Medium -
venv-openstack-muranoSUSE XXE in Nokogiri 2.6 Low -
venv-openstack-muranoSUSE py vulnerable to Regular Expression Denial of Service 7.5 High -
venv-openstack-muranoSUSE Insufficiently random values in Ansible 5.5 Medium -
venv-openstack-muranoSUSE CRLF injection in urllib3 6.5 Medium -
venv-openstack-muranoSUSE Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible 5.5 Medium -
venv-openstack-muranoSUSE Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible 5.0 Medium -
venv-openstack-muranoSUSE Improper Verification of Cryptographic Signature in ansible 7.1 High -
venv-openstack-muranoSUSE Flask-Cors Directory Traversal vulnerability 7.5 High -
venv-openstack-muranoSUSE OpenStack Nova Live migration fails to update persistent domain XML 8.3 High -
venv-openstack-muranoSUSE Grafana stored XSS 5.4 Medium -
venv-openstack-muranoSUSE It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in... 4.3 Medium -
venv-openstack-muranoSUSE Out-of-bounds reads in Pillow 5.5 Medium -
venv-openstack-muranoSUSE Out-of-bounds reads in Pillow 5.5 Medium -
venv-openstack-muranoSUSE Out-of-bounds read in Pillow 5.5 Medium -
venv-openstack-muranoSUSE Server Side Request Forgery in Grafana 8.2 High -
venv-openstack-muranoSUSE XSS in Django 6.1 Medium -
venv-openstack-muranoSUSE Data leakage via cache key collision in Django 5.9 Medium -
venv-openstack-muranoSUSE Grafana XSS via adding a link in General feature 6.1 Medium -
venv-openstack-muranoSUSE Grafana XSS via a column style 6.1 Medium -
venv-openstack-muranoSUSE Grafana XSS in Dashboard Text Panel 6.1 Medium -
venv-openstack-muranoSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 6.8 Medium -
venv-openstack-muranoSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 7.5 High -
venv-openstack-muranoSUSE Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible 5.0 Medium -
venv-openstack-muranoSUSE Exposure of Sensitive Information to an Unauthorized Actor in ansible 5.0 Medium -
venv-openstack-muranoSUSE Information disclosure issue in Active Resource 7.5 High - Show olderLoading…