mgr-virtualization vulnerabilities (SUSE)
31 vulnerabilities.
-
mgr-virtualizationSUSE Uncontrolled Resource Consumption in promhttp 7.5 High -
mgr-virtualizationSUSE Exposure of Sensitive Information in Grafana 4.3 Medium -
mgr-virtualizationSUSE Cross Site Request Forgery in Grafana 6.3 Medium -
mgr-virtualizationSUSE Cross site scripting in Grafana proxy 6.5 Medium -
mgr-virtualizationSUSE OAuth Identity Token exposure in Grafana 4.3 Medium -
mgr-virtualizationSUSE Grafana directory traversal for `.cvs` files 4.3 Medium -
mgr-virtualizationSUSE Directory Traversal in Grafana 4.3 Medium -
mgr-virtualizationSUSE Grafana path traversal 7.5 High -
mgr-virtualizationSUSE Cross organization admin control in Grafana 9.1 Critical -
mgr-virtualizationSUSE XSS vulnerability allowing arbitrary JavaScript execution 6.9 Medium -
mgr-virtualizationSUSE Ansible discloses sensitive information in traceback error message 5.5 Medium -
mgr-virtualizationSUSE Snapshot authentication bypass in grafana 9.8 Critical -
mgr-virtualizationSUSE Improper Input Validation and Command Injection in Ansible 7.1 High -
mgr-virtualizationSUSE SM2 Decryption Buffer Overflow 9.8 Critical -
mgr-virtualizationSUSE ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka... 7.5 High -
mgr-virtualizationSUSE Arbitrary redirects under /new endpoint 6.5 Medium -
mgr-virtualizationSUSE Command Injection in SaltStack Salt 7.8 High -
mgr-virtualizationSUSE A flaw was found in several ansible modules, where parameters containing credentials, such as... 5.5 Medium -
mgr-virtualizationSUSE One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7... 7.5 High -
mgr-virtualizationSUSE The team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x... 6.5 Medium -
mgr-virtualizationSUSE The team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control... 6.5 Medium -
mgr-virtualizationSUSE Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor... 7.1 High -
mgr-virtualizationSUSE Ansible Exposes Sensitive Information 7.5 High -
mgr-virtualizationSUSE Insertion of Sensitive Information into Log File in ansible 5.5 Medium -
mgr-virtualizationSUSE Insertion of Sensitive Information into Log File in ansible 5.5 Medium -
mgr-virtualizationSUSE Insertion of Sensitive Information into Log File in ansible 5.5 Medium -
mgr-virtualizationSUSE Server Side Request Forgery in Grafana 8.2 High -
mgr-virtualizationSUSE Grafana XSS in header column rename 6.1 Medium -
mgr-virtualizationSUSE Cross-site Scripting in Bootstrap-3-Typeahead 6.1 Medium -
mgr-virtualizationSUSE In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This... 7.5 High -
mgr-virtualizationSUSE It was found that Spacewalk, all versions through 2.8, did not safely compute client token... 4.3 Medium