dracut-saltboot vulnerabilities (SUSE)
115 vulnerabilities.
dracut-saltbootSUSEGrafana has Broken Access Control in Alert manager: Viewer can send test alerts4.1 Mediumdracut-saltbootSUSEGrafana Missing Synchronization vulnerability7.5 Highdracut-saltbootSUSEGrafana is an open-source platform for monitoring and observability. Starting with the 9.1...4.2 Mediumdracut-saltbootSUSEStored XSS in Graphite FunctionDescription tooltip6.2 Mediumdracut-saltbootSUSEGrafana vulnerable to Cross-site Scripting7.3 Highdracut-saltbootSUSEGrafana vulnerable to Cross-site Scripting7.3 Highdracut-saltbootSUSEDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 Highdracut-saltbootSUSEGrafana stored XSS in FileUploader component7.3 Highdracut-saltbootSUSEGrafana vulnerable to spoofing originalUrl of snapshots6.7 Mediumdracut-saltbootSUSEPrometheus Exporter Toolkit vulnerable to basic authentication bypass6.2 Mediumdracut-saltbootSUSEGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password6.7 Mediumdracut-saltbootSUSEGrafana contains Improper Input Validation6.4 Mediumdracut-saltbootSUSEGrafana users with email as a username can block other users from signing in4.3 Mediumdracut-saltbootSUSEData source and plugin proxy endpoints could leak the authentication cookie to some destination plugins6.8 Mediumdracut-saltbootSUSEGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins4.9 Mediumdracut-saltbootSUSEGrafana plugin signature bypass vulnerability6.1 Mediumdracut-saltbootSUSEDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 Highdracut-saltbootSUSEMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highdracut-saltbootSUSEGrafana folders admin only permission privilege escalation7.6 Highdracut-saltbootSUSEAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 Mediumdracut-saltbootSUSEgolang.org/x/net/http2 Denial of Service vulnerability7.5 Highdracut-saltbootSUSEGrafana account takeover via OAuth vulnerability7.1 Highdracut-saltbootSUSEStored XSS in Grafana's Unified Alerting7.3 Highdracut-saltbootSUSEGrafana Enterprise datasource network restrictions bypass via HTTP redirects6.6 Mediumdracut-saltbootSUSEPrototype Pollution in async7.8 Highdracut-saltbootSUSEUncontrolled Resource Consumption in promhttp7.5 Highdracut-saltbootSUSEExposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects8.0 Highdracut-saltbootSUSEGrafana directory traversal for `.cvs` files4.3 Mediumdracut-saltbootSUSEDirectory Traversal in Grafana4.3 Mediumdracut-saltbootSUSEGrafana path traversal7.5 Highdracut-saltbootSUSECross organization admin control in Grafana9.1 Criticaldracut-saltbootSUSEPrototype Pollution in kriszyp/json-schema9.8 Criticaldracut-saltbootSUSEXSS vulnerability allowing arbitrary JavaScript execution6.9 Mediumdracut-saltbootSUSEAnsible discloses sensitive information in traceback error message5.5 Mediumdracut-saltbootSUSEImproper Input Validation and Command Injection in Ansible7.1 Highdracut-saltbootSUSEInefficient Regular Expression Complexity in chalk/ansi-regex7.5 Highdracut-saltbootSUSESM2 Decryption Buffer Overflow9.8 Criticaldracut-saltbootSUSEec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.5 Highdracut-saltbootSUSEArbitrary redirects under /new endpoint6.5 Mediumdracut-saltbootSUSEA flaw was found in several ansible modules, where parameters containing credentials, such as...5.5 Mediumdracut-saltbootSUSEOne of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7...7.5 Highdracut-saltbootSUSEThe team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x...6.5 Mediumdracut-saltbootSUSEThe team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control...6.5 Mediumdracut-saltbootSUSEGrafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor...7.1 Highdracut-saltbootSUSEAnsible Exposes Sensitive Information7.5 Highdracut-saltbootSUSEInsertion of Sensitive Information into Log File in ansible5.5 Mediumdracut-saltbootSUSEInsertion of Sensitive Information into Log File in ansible5.5 Mediumdracut-saltbootSUSEInsertion of Sensitive Information into Log File in ansible5.5 Mediumdracut-saltbootSUSERegular Expression Denial of Service (ReDoS)7.5 Highdracut-saltbootSUSEInsertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible5.5 Medium- Show moreLoading…