cobbler vulnerabilities (SUSE)
66 vulnerabilities.
-
cobblerSUSE SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint 9.3 Critical -
cobblerSUSE Multi Linux Manager epxoses the plain text HTTP Proxy user:password in logs 6.9 Medium -
cobblerSUSE Reflected XSS in spacewalk-java 5.6 Medium -
cobblerSUSE Reflected XSS in SystemsController.java in spacewalk-java 5.6 Medium -
cobblerSUSE Reflected XSS in Setup Wizard, Organization Credentials in spacewalk-web 4.6 Medium -
cobblerSUSE Reflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web 4.6 Medium -
cobblerSUSE Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes 9.8 Critical -
cobblerSUSE Insecure handling SSH key in SUSE Manager when bootstrapping new clients 6.4 Medium -
cobblerSUSE jose4j denial of service via specifically crafted JWE 6.5 Medium -
cobblerSUSE jose4j uses weak cryptographic algorithm 7.5 High -
cobblerSUSE Large RSA keys can cause high CPU usage in crypto/tls 5.3 Medium -
cobblerSUSE JWT token compromise can allow malicious actions including Remote Code Execution (RCE) 9.4 Critical -
cobblerSUSE Drools: unsafe data deserialization in streamutils 8.1 High -
cobblerSUSE Stack Buffer Overflow in Woodstox 6.5 Medium -
cobblerSUSE Inefficient Regular Expression Complexity in moment 7.5 High -
cobblerSUSE XML External Entity Reference in drools 9.8 Critical -
cobblerSUSE Improper Authorization in cobbler/cobbler 8.2 High -
cobblerSUSE Command Injection in Cobbler 7.8 High -
cobblerSUSE Incorrect Default Permissions in Cobbler 7.1 High -
cobblerSUSE OpenEXR 3.1.0 through 3.1.3 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask:... 5.5 Medium -
cobblerSUSE Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config... 8.8 High -
cobblerSUSE Improper Neutralization of Special Elements used in a Command in Shell-quote 9.8 Critical -
cobblerSUSE Cobbler before 3.3.0 allows authorization bypass for modification of settings. 7.5 High -
cobblerSUSE Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data. 7.5 High -
cobblerSUSE Cobbler before 3.3.0 allows log poisoning 9.8 Critical -
cobblerSUSE Exposure of Resource to Wrong Sphere in salt 7.5 High -
cobblerSUSE Command Injection in SaltStack Salt 7.8 High -
cobblerSUSE Infinite loop in Apache Tika's MP3 parser 5.5 Medium -
cobblerSUSE Prototype Pollution 7.5 High -
cobblerSUSE Server-Side Forgery Request can be activated unmarshalling with XStream 6.3 Medium -
cobblerSUSE XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling 6.8 Medium -
cobblerSUSE Remote Code Execution in XStream 8.0 High -
cobblerSUSE SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi 9.8 Critical -
cobblerSUSE SaltStack Salt Allows creating certificates with weak file permissions 5.5 Medium -
cobblerSUSE SaltStack Salt Command Injection in netapi ssh client 9.8 Critical -
cobblerSUSE Server Side Request Forgery in Grafana 8.2 High -
cobblerSUSE jQuery has a potential XSS vulnerability 6.9 Medium -
cobblerSUSE Grafana XSS in header column rename 6.1 Medium -
cobblerSUSE Prototype Pollution in minimist 5.6 Medium -
cobblerSUSE Cross-site Scripting in Bootstrap-3-Typeahead 6.1 Medium -
cobblerSUSE In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This... 7.5 High -
cobblerSUSE Allocation of Resources Without Limits or Throttling in Apache Tika 8.8 High -
cobblerSUSE Allocation of Resources Without Limits or Throttling in Apache Tika 7.8 High -
cobblerSUSE Allocation of Resources Without Limits or Throttling in Apache Tika 6.5 Medium -
cobblerSUSE susemanager installer creates world-readable swap files 4.0 Medium -
cobblerSUSE Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser 6.5 Medium -
cobblerSUSE PowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4... 5.3 Medium -
cobblerSUSE PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor... 5.3 Medium -
cobblerSUSE High severity vulnerability that affects org.apache.tika:tika-core 7.5 High -
cobblerSUSE Cobbler Improper Validation of Security Tokens 9.8 Critical - Show olderLoading…