kiwi-desc-saltboot vulnerabilities (SUSE)
52 vulnerabilities.
kiwi-desc-saltbootSUSETornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters7.5 Highkiwi-desc-saltbootSUSETornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing7.5 Highkiwi-desc-saltbootSUSETornado vulnerable to Header Injection and XSS via reason argument5.4 Mediumkiwi-desc-saltbootSUSESalt Master authentication protocol downgrade may enable minion impersonation7.5 Highkiwi-desc-saltbootSUSESalt junos module uses an unsafe YAML loader which may allow unintended code execution7.3 Highkiwi-desc-saltbootSUSEAlertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint7.5 Highkiwi-desc-saltbootSUSEGrafana vulnerable to Authentication Bypass by Spoofing9.4 Criticalkiwi-desc-saltbootSUSEGrafana has Broken Access Control in Alert manager: Viewer can send test alerts4.1 Mediumkiwi-desc-saltbootSUSEGrafana Missing Synchronization vulnerability7.5 Highkiwi-desc-saltbootSUSEOpen redirect in Tornado6.1 Mediumkiwi-desc-saltbootSUSEGrafana is an open-source platform for monitoring and observability. Starting with the 9.1...4.2 Mediumkiwi-desc-saltbootSUSEStored XSS in Graphite FunctionDescription tooltip6.2 Mediumkiwi-desc-saltbootSUSEGrafana vulnerable to Cross-site Scripting7.3 Highkiwi-desc-saltbootSUSEGrafana vulnerable to Cross-site Scripting7.3 Highkiwi-desc-saltbootSUSEDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 Highkiwi-desc-saltbootSUSEGrafana stored XSS in FileUploader component7.3 Highkiwi-desc-saltbootSUSEGrafana vulnerable to spoofing originalUrl of snapshots6.7 Mediumkiwi-desc-saltbootSUSEPrometheus Exporter Toolkit vulnerable to basic authentication bypass6.2 Mediumkiwi-desc-saltbootSUSEGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password6.7 Mediumkiwi-desc-saltbootSUSEGrafana contains Improper Input Validation6.4 Mediumkiwi-desc-saltbootSUSEGrafana users with email as a username can block other users from signing in4.3 Mediumkiwi-desc-saltbootSUSEData source and plugin proxy endpoints could leak the authentication cookie to some destination plugins6.8 Mediumkiwi-desc-saltbootSUSEGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins4.9 Mediumkiwi-desc-saltbootSUSEGrafana plugin signature bypass vulnerability6.1 Mediumkiwi-desc-saltbootSUSEDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 Highkiwi-desc-saltbootSUSEMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highkiwi-desc-saltbootSUSEGrafana folders admin only permission privilege escalation7.6 Highkiwi-desc-saltbootSUSEAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 Mediumkiwi-desc-saltbootSUSEgolang.org/x/net/http2 Denial of Service vulnerability7.5 Highkiwi-desc-saltbootSUSEGrafana account takeover via OAuth vulnerability7.1 Highkiwi-desc-saltbootSUSEStored XSS in Grafana's Unified Alerting7.3 Highkiwi-desc-saltbootSUSEGrafana Enterprise datasource network restrictions bypass via HTTP redirects6.6 Mediumkiwi-desc-saltbootSUSEPrototype Pollution in async7.8 Highkiwi-desc-saltbootSUSEgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 Highkiwi-desc-saltbootSUSEUncontrolled Resource Consumption in promhttp7.5 Highkiwi-desc-saltbootSUSEExposure of Sensitive Information in Grafana4.3 Mediumkiwi-desc-saltbootSUSECross Site Request Forgery in Grafana6.3 Mediumkiwi-desc-saltbootSUSECross site scripting in Grafana proxy6.5 Mediumkiwi-desc-saltbootSUSEOAuth Identity Token exposure in Grafana4.3 Mediumkiwi-desc-saltbootSUSEExposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects8.0 Highkiwi-desc-saltbootSUSEGrafana directory traversal for `.cvs` files4.3 Mediumkiwi-desc-saltbootSUSEDirectory Traversal in Grafana4.3 Mediumkiwi-desc-saltbootSUSEGrafana path traversal7.5 Highkiwi-desc-saltbootSUSECross organization admin control in Grafana9.1 Criticalkiwi-desc-saltbootSUSEPrototype Pollution in kriszyp/json-schema9.8 Criticalkiwi-desc-saltbootSUSEXSS vulnerability allowing arbitrary JavaScript execution6.9 Mediumkiwi-desc-saltbootSUSESnapshot authentication bypass in grafana9.8 Criticalkiwi-desc-saltbootSUSEInefficient Regular Expression Complexity in chalk/ansi-regex7.5 Highkiwi-desc-saltbootSUSESM2 Decryption Buffer Overflow9.8 Criticalkiwi-desc-saltbootSUSEec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.5 High- Show olderLoading…