mgr-osad vulnerabilities (SUSE)
49 vulnerabilities.
-
mgr-osadSUSE Drools: unsafe data deserialization in streamutils 8.1 High -
mgr-osadSUSE Grafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password 6.7 Medium -
mgr-osadSUSE Grafana contains Improper Input Validation 6.4 Medium -
mgr-osadSUSE Grafana users with email as a username can block other users from signing in 4.3 Medium -
mgr-osadSUSE Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins 6.8 Medium -
mgr-osadSUSE Grafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins 4.9 Medium -
mgr-osadSUSE Grafana plugin signature bypass vulnerability 6.1 Medium -
mgr-osadSUSE Stack Buffer Overflow in Woodstox 6.5 Medium -
mgr-osadSUSE Inefficient Regular Expression Complexity in moment 7.5 High -
mgr-osadSUSE Improper Authorization in cobbler/cobbler 8.2 High -
mgr-osadSUSE Uncontrolled Resource Consumption in promhttp 7.5 High -
mgr-osadSUSE Exposure of Sensitive Information in Grafana 4.3 Medium -
mgr-osadSUSE Cross Site Request Forgery in Grafana 6.3 Medium -
mgr-osadSUSE Cross site scripting in Grafana proxy 6.5 Medium -
mgr-osadSUSE OAuth Identity Token exposure in Grafana 4.3 Medium -
mgr-osadSUSE Grafana directory traversal for `.cvs` files 4.3 Medium -
mgr-osadSUSE Directory Traversal in Grafana 4.3 Medium -
mgr-osadSUSE Grafana path traversal 7.5 High -
mgr-osadSUSE Cross organization admin control in Grafana 9.1 Critical -
mgr-osadSUSE XSS vulnerability allowing arbitrary JavaScript execution 6.9 Medium -
mgr-osadSUSE Improper Neutralization of Special Elements used in a Command in Shell-quote 9.8 Critical -
mgr-osadSUSE Snapshot authentication bypass in grafana 9.8 Critical -
mgr-osadSUSE SM2 Decryption Buffer Overflow 9.8 Critical -
mgr-osadSUSE ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka... 7.5 High -
mgr-osadSUSE Arbitrary redirects under /new endpoint 6.5 Medium -
mgr-osadSUSE Command Injection in SaltStack Salt 7.8 High -
mgr-osadSUSE One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7... 7.5 High -
mgr-osadSUSE The team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x... 6.5 Medium -
mgr-osadSUSE The team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control... 6.5 Medium -
mgr-osadSUSE Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor... 7.1 High -
mgr-osadSUSE Prototype Pollution 7.5 High -
mgr-osadSUSE Server-Side Forgery Request can be activated unmarshalling with XStream 6.3 Medium -
mgr-osadSUSE XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling 6.8 Medium -
mgr-osadSUSE SQL injection in hibernate-core 7.4 High -
mgr-osadSUSE Remote Code Execution in XStream 8.0 High -
mgr-osadSUSE Server Side Request Forgery in Grafana 8.2 High -
mgr-osadSUSE jQuery has a potential XSS vulnerability 6.9 Medium -
mgr-osadSUSE Grafana XSS in header column rename 6.1 Medium -
mgr-osadSUSE A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity... 8.6 High -
mgr-osadSUSE Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS) 4.2 Medium -
mgr-osadSUSE Cross-site Scripting in Bootstrap-3-Typeahead 6.1 Medium -
mgr-osadSUSE In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This... 7.5 High -
mgr-osadSUSE Allocation of Resources Without Limits or Throttling in Apache Tika 8.8 High -
mgr-osadSUSE Allocation of Resources Without Limits or Throttling in Apache Tika 7.8 High -
mgr-osadSUSE Allocation of Resources Without Limits or Throttling in Apache Tika 6.5 Medium -
mgr-osadSUSE It was found that Spacewalk, all versions through 2.8, did not safely compute client token... 4.3 Medium -
mgr-osadSUSE Billion laughs attack in c3p0 7.5 High -
mgr-osadSUSE XML External Entity Reference in mchange:c3p0 9.8 Critical -
mgr-osadSUSE Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially... 7.5 High