rmt-server vulnerabilities (openSUSE)
39 vulnerabilities.
-
rmt-serveropenSUSE net-imap: Denial of service via high iteration count for `SCRAM-*` authentication 6.0 Medium -
rmt-serveropenSUSE Rack: Header injection in multipart requests 4.8 Medium -
rmt-serveropenSUSE Rack: Rack::Sendfile regex injection via HTTP_X_ACCEL_MAPPING header allows arbitrary file reads through nginx 5.9 Medium -
rmt-serveropenSUSE Rack: Denial of Service via Unbounded Multipart File Upload Without Content-Length 7.5 High -
rmt-serveropenSUSE Rack: Unbounded Range Count in get_byte_ranges Enables DoS 5.3 Medium -
rmt-serveropenSUSE Rack: Rack::Static header_rules bypass via URL-encoded paths 5.3 Medium -
rmt-serveropenSUSE Rack: Local file inclusion in `Rack::Static` via URL Prefix Matching 7.5 High -
rmt-serveropenSUSE Rack: Rack::Directory info disclosure and DoS via unescaped regex interpolation 5.3 Medium -
rmt-serveropenSUSE Rack: Content-Length mismatch in Rack::Files error responses 4.8 Medium -
rmt-serveropenSUSE Rack: Multipart Boundary Parsing Ambiguity allowing WAF Bypass 3.7 Low -
rmt-serveropenSUSE Rack: Quadratic complexity in Rack::Utils.select_best_encoding via wildcard Accept-Encoding header 5.3 Medium -
rmt-serveropenSUSE Unbounded-Parameter DoS in Rack::QueryParser 7.5 High -
rmt-serveropenSUSE Rack session gets restored after deletion 4.2 Medium -
rmt-serveropenSUSE Action Pack is missing security headers on non-HTML responses 5.4 Medium -
rmt-serveropenSUSE Possible XSS Security Vulnerability in SafeBuffer#bytesplice 5.3 Medium -
rmt-serveropenSUSE Rack has possible DoS Vulnerability in Multipart MIME parsing 7.5 High -
rmt-serveropenSUSE rmt-server-pubcloud allows to escalate from user _rmt to root 7.8 High -
rmt-serveropenSUSE XSS in Action View 5.4 Medium -
rmt-serveropenSUSE Untrusted users can run pending migrations in production in Rails 6.5 Medium -
rmt-serveropenSUSE CSRF Vulnerability in rails-ujs 6.5 Medium -
rmt-serveropenSUSE Security update for rmt-server No score -
rmt-serveropenSUSE Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names 7.5 High -
rmt-serveropenSUSE Ability to forge per-form CSRF tokens in Rails 4.3 Medium -
rmt-serveropenSUSE Possible Strong Parameters Bypass in ActionPack 7.5 High -
rmt-serveropenSUSE ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore 9.8 Critical -
rmt-serveropenSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 6.8 Medium -
rmt-serveropenSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 7.5 High -
rmt-serveropenSUSE Possible XSS vulnerability in ActionView 4.0 Medium -
rmt-serveropenSUSE HTTP Response Splitting (Early Hints) in Puma 6.5 Medium -
rmt-serveropenSUSE HTTP Response Splitting in Puma 6.5 Medium -
rmt-serveropenSUSE Migrations requests can cause DoS on rmt 6.5 Medium -
rmt-serveropenSUSE Potential DOS attack in Puma 5.3 Medium -
rmt-serveropenSUSE Nokogiri vulnerable to libxslt protection mechanism bypass 9.8 Critical -
rmt-serveropenSUSE Use of Insufficiently Random Values in Railties Allows Remote Code Execution 9.8 Critical -
rmt-serveropenSUSE Path Traversal in Action View 7.5 High -
rmt-serveropenSUSE Denial of Service Vulnerability in Action View 7.5 High -
rmt-serveropenSUSE Rack vulnerable to Denial of Service 7.5 High -
rmt-serveropenSUSE Loofah Cross-site Scripting vulnerability 5.4 Medium -
rmt-serveropenSUSE Nokogiri NULL Pointer Dereference 7.5 High