mgr-daemon vulnerabilities (SUSE)
78 vulnerabilities.
-
mgr-daemonSUSE SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint 9.3 Critical -
mgr-daemonSUSE Multi Linux Manager epxoses the plain text HTTP Proxy user:password in logs 6.9 Medium -
mgr-daemonSUSE Reflected XSS in spacewalk-java 5.6 Medium -
mgr-daemonSUSE Reflected XSS in SystemsController.java in spacewalk-java 5.6 Medium -
mgr-daemonSUSE Reflected XSS in Setup Wizard, Organization Credentials in spacewalk-web 4.6 Medium -
mgr-daemonSUSE Reflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web 4.6 Medium -
mgr-daemonSUSE Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes 9.8 Critical -
mgr-daemonSUSE Users outside an organization can delete a snapshot with its key 6.5 Medium -
mgr-daemonSUSE Insecure handling SSH key in SUSE Manager when bootstrapping new clients 6.4 Medium -
mgr-daemonSUSE Email Validation Bypass And Preventing Sign Up From Email's Owner 5.4 Medium -
mgr-daemonSUSE Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration 5.0 Medium -
mgr-daemonSUSE jose4j denial of service via specifically crafted JWE 6.5 Medium -
mgr-daemonSUSE Ansible: template injection 7.1 High -
mgr-daemonSUSE jose4j uses weak cryptographic algorithm 7.5 High -
mgr-daemonSUSE Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint 7.5 High -
mgr-daemonSUSE Improper rendering of text nodes in golang.org/x/net/html 6.1 Medium -
mgr-daemonSUSE JWT token compromise can allow malicious actions including Remote Code Execution (RCE) 9.4 Critical -
mgr-daemonSUSE Grafana is an open-source platform for monitoring and observability. Starting with the 9.1... 4.2 Medium -
mgr-daemonSUSE Stored XSS in Graphite FunctionDescription tooltip 6.2 Medium -
mgr-daemonSUSE Prometheus Exporter Toolkit vulnerable to basic authentication bypass 6.2 Medium -
mgr-daemonSUSE Denial of service via crafted Accept-Language header in golang.org/x/text/language 7.5 High -
mgr-daemonSUSE Memory exhaustion when compiling regular expressions in regexp/syntax 7.5 High -
mgr-daemonSUSE Grafana folders admin only permission privilege escalation 7.6 High -
mgr-daemonSUSE Authentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin 6.6 Medium -
mgr-daemonSUSE golang.org/x/net/http2 Denial of Service vulnerability 7.5 High -
mgr-daemonSUSE Grafana account takeover via OAuth vulnerability 7.1 High -
mgr-daemonSUSE Stored XSS in Grafana's Unified Alerting 7.3 High -
mgr-daemonSUSE Inefficient Regular Expression Complexity in moment 7.5 High -
mgr-daemonSUSE XML External Entity Reference in drools 9.8 Critical -
mgr-daemonSUSE Prototype Pollution in async 7.8 High -
mgr-daemonSUSE golang.org/x/crypto/ssh Denial of service via crafted Signer 7.5 High -
mgr-daemonSUSE Improper Authorization in cobbler/cobbler 8.2 High -
mgr-daemonSUSE Uncontrolled Resource Consumption in promhttp 7.5 High -
mgr-daemonSUSE Exposure of Sensitive Information in Grafana 4.3 Medium -
mgr-daemonSUSE Cross Site Request Forgery in Grafana 6.3 Medium -
mgr-daemonSUSE Cross site scripting in Grafana proxy 6.5 Medium -
mgr-daemonSUSE OAuth Identity Token exposure in Grafana 4.3 Medium -
mgr-daemonSUSE Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects 8.0 High -
mgr-daemonSUSE Grafana directory traversal for `.cvs` files 4.3 Medium -
mgr-daemonSUSE Directory Traversal in Grafana 4.3 Medium -
mgr-daemonSUSE Grafana path traversal 7.5 High -
mgr-daemonSUSE Cross organization admin control in Grafana 9.1 Critical -
mgr-daemonSUSE Prototype Pollution in kriszyp/json-schema 9.8 Critical -
mgr-daemonSUSE XSS vulnerability allowing arbitrary JavaScript execution 6.9 Medium -
mgr-daemonSUSE Ansible discloses sensitive information in traceback error message 5.5 Medium -
mgr-daemonSUSE Improper Neutralization of Special Elements used in a Command in Shell-quote 9.8 Critical -
mgr-daemonSUSE Snapshot authentication bypass in grafana 9.8 Critical -
mgr-daemonSUSE Improper Input Validation and Command Injection in Ansible 7.1 High -
mgr-daemonSUSE Inefficient Regular Expression Complexity in chalk/ansi-regex 7.5 High -
mgr-daemonSUSE SM2 Decryption Buffer Overflow 9.8 Critical - Show olderLoading…