dracut-wireless vulnerabilities (SUSE)
11 vulnerabilities.
-
dracut-wirelessSUSE Rollup 4 has Arbitrary File Write via Path Traversal 8.8 High -
dracut-wirelessSUSE Public Dashboards time range restriction on annotations can be bypassed 5.3 Medium -
dracut-wirelessSUSE jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions 9.2 Critical -
dracut-wirelessSUSE Uncontrolled Resource Consumption in @isaacs/brace-expansion 9.2 Critical -
dracut-wirelessSUSE JSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js 9.8 Critical -
dracut-wirelessSUSE Tornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters 7.5 High -
dracut-wirelessSUSE Tornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing 7.5 High -
dracut-wirelessSUSE Tornado vulnerable to Header Injection and XSS via reason argument 5.4 Medium -
dracut-wirelessSUSE Salt Master authentication protocol downgrade may enable minion impersonation 7.5 High -
dracut-wirelessSUSE Salt junos module uses an unsafe YAML loader which may allow unintended code execution 7.3 High -
dracut-wirelessSUSE Grafana's insecure DingDing Alert integration exposes sensitive information 4.3 Medium