venv-openstack-murano vulnerabilities (SUSE)
148 vulnerabilities.
venv-openstack-muranoSUSEExposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible5.0 Mediumvenv-openstack-muranoSUSEPath Traversal in Ansible5.2 Mediumvenv-openstack-muranoSUSEGrafana version < 6.7.3 is vulnerable for annotation popup XSS.6.1 Mediumvenv-openstack-muranoSUSEUnsafe object creation in json RubyGem7.5 Highvenv-openstack-muranoSUSECode Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible7.9 Highvenv-openstack-muranoSUSEArgument Injection in Ansible3.9 Lowvenv-openstack-muranoSUSEExposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible3.9 Lowvenv-openstack-muranoSUSEPath Traversal in Ansible4.2 Mediumvenv-openstack-muranoSUSEIncorrect Permission Assignment for Critical Resource in Ansible2.2 Lowvenv-openstack-muranoSUSEInsertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible5.0 Mediumvenv-openstack-muranoSUSEExposure of Sensitive Information to an Unauthorized Actor in Ansible3.9 Lowvenv-openstack-muranoSUSEAnsible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File5.0 Mediumvenv-openstack-muranoSUSEOpenStack Manila Unprivileged users can retrieve, use and manipulate share networks8.3 Highvenv-openstack-muranoSUSEPath Traversal in Ansible7.5 Highvenv-openstack-muranoSUSESQL injection in Django8.8 Highvenv-openstack-muranoSUSEOS Command Injection in ansible7.4 Highvenv-openstack-muranoSUSEHTTP Response Splitting in Puma6.5 Mediumvenv-openstack-muranoSUSEmysql-systemd-helper allows setting 640 permissions of arbitrary files5.1 Mediumvenv-openstack-muranoSUSEcrowbar provision leaks admin password to all nodes in cleartext9.3 Criticalvenv-openstack-muranoSUSESQL injection in Django9.8 Criticalvenv-openstack-muranoSUSEExternally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible7.3 Highvenv-openstack-muranoSUSEOS Command Injection and Improper Input Validation in ansible7.3 Highvenv-openstack-muranoSUSElibxml as used in Nokogiri has an infinite loop in a certain end-of-file situation7.5 Highvenv-openstack-muranoSUSEVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...5.9 Mediumvenv-openstack-muranoSUSEImproper Verification of Cryptographic Signature in PySAML27.5 Highvenv-openstack-muranoSUSEUncontrolled Resource Consumption in Pillow7.5 Highvenv-openstack-muranoSUSEPCX P mode buffer overflow in Pillow9.8 Criticalvenv-openstack-muranoSUSEOut-of-bounds Read in Pillow7.1 Highvenv-openstack-muranoSUSEHTTP Request Smuggling in Waitress: Invalid whitespace characters in headers7.1 Highvenv-openstack-muranoSUSEHTTP Request Smuggling: Content-Length Sent Twice in Waitress7.1 Highvenv-openstack-muranoSUSEHTTP Request Smuggling: LF vs CRLF handling in Waitress7.1 Highvenv-openstack-muranoSUSEHTTP Request Smuggling: Invalid Transfer-Encoding in Waitress7.1 Highvenv-openstack-muranoSUSEDjango Potential account hijack via password reset form9.8 Criticalvenv-openstack-muranoSUSEInclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible5.7 Mediumvenv-openstack-muranoSUSEPotential DOS attack in Puma5.3 Mediumvenv-openstack-muranoSUSEAnsible password prompts could expose passwords6.4 Mediumvenv-openstack-muranoSUSEExposure of Sensitive Information to an Unauthorized Actor in ansible5.7 Mediumvenv-openstack-muranoSUSERabbitMQ Web Management Plugin DoS via heap overflow4.5 Mediumvenv-openstack-muranoSUSEDouble Free in psutil7.5 Highvenv-openstack-muranoSUSEVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....6.5 Mediumvenv-openstack-muranoSUSEVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...4.4 Mediumvenv-openstack-muranoSUSEHaml vulnerable to cross-site scripting6.1 Mediumvenv-openstack-muranoSUSEAnsible leaks sensitive information to logs when told not to7.3 Highvenv-openstack-muranoSUSEAnsible Uses Plugins That Disclose Credentials7.3 Highvenv-openstack-muranoSUSEDOS attack in Pillow when processing specially crafted image files7.5 Highvenv-openstack-muranoSUSEAnsible password prompts could expose passwords6.4 Mediumvenv-openstack-muranoSUSEIn Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This...7.5 Highvenv-openstack-muranoSUSEmemcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str...7.5 Highvenv-openstack-muranoSUSENokogiri Command Injection Vulnerability9.8 Criticalvenv-openstack-muranoSUSEDeserialization of Untrusted Data in Apache Storm9.8 Critical- Show moreLoading…