venv-openstack-nova vulnerabilities (SUSE)

188 vulnerabilities.

• venv-openstack-nova SUSE Cipher.update_into can corrupt memory in pyca cryptography CVE-2023-23931 Fix available 4.8 MediumFebruary 7, 2023
• venv-openstack-nova SUSE OpenStack Cinder, glance, and Nova vulnerable to Path Traversal CVE-2022-47951 Fix available 5.7 MediumJanuary 26, 2023
• venv-openstack-nova SUSE A flaw was found in the openstack-barbican component. This issue allows an access policy bypass... CVE-2022-3100 Fix available 5.9 MediumSeptember 29, 2022
• venv-openstack-nova SUSE Apache Spark shell command injection vulnerability via Spark UI CVE-2022-33891 In KEVPublic exploitFix available EPSS 93.2% 8.8 HighJuly 18, 2022
• venv-openstack-nova SUSE Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection CVE-2022-34265 Public exploitFix available EPSS 73.6% 9.8 CriticalJuly 4, 2022
• venv-openstack-nova SUSE sinatra does not validate expanded path matches CVE-2022-29970 Fix available 7.5 HighMay 2, 2022
• venv-openstack-nova SUSE SQL Injection in Django CVE-2022-28346 Public exploitFix available EPSS 18.7% 9.8 CriticalApril 11, 2022
• venv-openstack-nova SUSE HTTP Request Smuggling in puma CVE-2022-24790 Fix available 9.1 CriticalMarch 30, 2022
• venv-openstack-nova SUSE Infinite Loop in Django CVE-2022-23833 Fix available EPSS 49.5% 7.5 HighFebruary 1, 2022
• venv-openstack-nova SUSE Cross-site Scripting in Django CVE-2022-22818 Public exploitFix available 6.1 MediumFebruary 1, 2022
• venv-openstack-nova SUSE openstack-barbican Denial of Service vulnerability CVE-2022-23452 Fix available 4.9 MediumJanuary 28, 2022
• venv-openstack-nova SUSE Barbican authorization flaw before v14.0.0 CVE-2022-23451 Fix available 8.1 HighJanuary 28, 2022
• venv-openstack-nova SUSE A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. CVE-2022-23307 Fix available EPSS 54.4% 8.8 HighJanuary 18, 2022
• venv-openstack-nova SUSE SQL injection in JDBC Appender in Apache Log4j V1 CVE-2022-23305 Public exploitFix available EPSS 66.5% 9.8 CriticalJanuary 18, 2022
• venv-openstack-nova SUSE Deserialization of untrusted data in JMSSink in Apache Log4j 1.x CVE-2022-23302 Fix available EPSS 63.8% 8.8 HighJanuary 18, 2022
• venv-openstack-nova SUSE Arbitrary expression injection in Pillow CVE-2022-22817 Fix available 9.8 CriticalJanuary 7, 2022
• venv-openstack-nova SUSE Out-of-bounds Read in Pillow CVE-2022-22816 Fix available 6.5 MediumJanuary 7, 2022
• venv-openstack-nova SUSE Improper Initialization in Pillow CVE-2022-22815 Fix available 6.5 MediumJanuary 7, 2022
• venv-openstack-nova SUSE Directory-traversal in Django CVE-2021-45452 Fix available 5.3 MediumJanuary 4, 2022
• venv-openstack-nova SUSE golang.org/x/net/http2 allows uncontrolled memory consumption CVE-2021-44716 Fix available 7.5 HighDecember 15, 2021
• venv-openstack-nova SUSE Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• venv-openstack-nova SUSE HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-43818 Fix available 8.2 HighDecember 13, 2021
• venv-openstack-nova SUSE Directory Traversal in Grafana CVE-2021-43813 Fix available EPSS 56.6% 4.3 MediumDecember 10, 2021
• venv-openstack-nova SUSE An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user... CVE-2021-22141 6.1 MediumNovember 19, 2021
• venv-openstack-nova SUSE XSS in the `of` option of the `.position()` util CVE-2021-41184 Public exploitFix available EPSS 40.8% 6.5 MediumOctober 26, 2021
• venv-openstack-nova SUSE XSS in `*Text` options of the Datepicker widget CVE-2021-41183 Fix available 6.5 MediumOctober 26, 2021
• venv-openstack-nova SUSE XSS in the `altField` option of the Datepicker widget CVE-2021-41182 Public exploitFix available EPSS 39.4% 6.5 MediumOctober 26, 2021
• venv-openstack-nova SUSE Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma CVE-2021-41136 Fix available 3.7 LowOctober 12, 2021
• venv-openstack-nova SUSE Snapshot authentication bypass in grafana CVE-2021-39226 In KEVFix available EPSS 99.9% 9.8 CriticalOctober 5, 2021
• venv-openstack-nova SUSE OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value CVE-2021-40085 Fix available 6.5 MediumAugust 31, 2021
• venv-openstack-nova SUSE OpenStack Keystone allows information disclosure during account locking CVE-2021-38155 Fix available 7.5 HighAugust 6, 2021
• venv-openstack-nova SUSE Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks CVE-2021-33571 Fix available 7.5 HighJune 2, 2021
• venv-openstack-nova SUSE Path Traversal in Django CVE-2021-33203 Fix available 4.9 MediumJune 2, 2021
• venv-openstack-nova SUSE Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet CVE-2021-21419 Fix available 5.3 MediumMay 7, 2021
• venv-openstack-nova SUSE Path Traversal in Django CVE-2021-31542 Fix available 7.5 HighMay 4, 2021
• venv-openstack-nova SUSE Directory Traversal in Django CVE-2021-28658 Fix available 5.3 MediumApril 6, 2021
• venv-openstack-nova SUSE lxml vulnerable to Cross-Site Scripting CVE-2021-28957 Fix available 6.1 MediumMarch 21, 2021
• venv-openstack-nova SUSE Denial of service in Grafana CVE-2021-27358 Fix available EPSS 83.0% 7.5 HighMarch 18, 2021
• venv-openstack-nova SUSE Activerecord-session_store Vulnerable to Timing Attack CVE-2019-25025 Fix available 5.3 MediumMarch 5, 2021
• venv-openstack-nova SUSE Web Cache Poisoning CVE-2021-23336 Fix available EPSS 40.7% 5.9 MediumFebruary 15, 2021
• venv-openstack-nova SUSE Authentication Bypass in Apache Cassandra CVE-2020-17516 Fix available 7.5 HighFebruary 3, 2021
• venv-openstack-nova SUSE Django Directory Traversal via archive.extract CVE-2021-3281 Public exploitFix available 5.3 MediumFebruary 1, 2021
• venv-openstack-nova SUSE Open default xmlsec1 key-type preference CVE-2021-21239 Public exploitFix available 6.5 MediumJanuary 21, 2021
• venv-openstack-nova SUSE SAML XML Signature wrapping CVE-2021-21238 Fix available 6.5 MediumJanuary 21, 2021
• venv-openstack-nova SUSE Injection in Redcarpet CVE-2020-26298 Fix available 6.8 MediumJanuary 11, 2021
• venv-openstack-nova SUSE XXE in Nokogiri CVE-2020-26247 Fix available 2.6 LowDecember 30, 2020
• venv-openstack-nova SUSE py vulnerable to Regular Expression Denial of Service CVE-2020-29651 Fix available 7.5 HighDecember 9, 2020
• venv-openstack-nova SUSE lxml vulnerable to Cross-site Scripting CVE-2020-27783 Fix available 6.1 MediumNovember 26, 2020
• venv-openstack-nova SUSE Improper Authentication in InfluxDB CVE-2019-20933 Public exploitFix available EPSS 30.9% 9.8 CriticalNovember 19, 2020
• venv-openstack-nova SUSE Insufficiently random values in Ansible CVE-2020-10729 Fix available 5.5 MediumNovember 12, 2020
• Show olderLoading…