patterns-suse-manager vulnerabilities (SUSE)

28 vulnerabilities.

• patterns-suse-manager SUSE Insecure handling SSH key in SUSE Manager when bootstrapping new clients CVE-2023-32189 6.4 MediumFebruary 15, 2024
• patterns-suse-manager SUSE jose4j uses weak cryptographic algorithm CVE-2023-31582 Fix available 7.5 HighOctober 24, 2023
• patterns-suse-manager SUSE Inefficient Regular Expression Complexity in moment CVE-2022-31129 Fix available 7.5 HighJuly 6, 2022
• patterns-suse-manager SUSE SUMA user enumeration via weak error message CVE-2022-31248 Fix available 5.3 MediumJune 20, 2022
• patterns-suse-manager SUSE SUMA unauthenticated remote DoS via resource exhaustion CVE-2022-21952 7.5 HighJune 20, 2022
• patterns-suse-manager SUSE XML External Entity Reference in drools CVE-2021-41411 Fix available 9.8 CriticalJune 16, 2022
• patterns-suse-manager SUSE Prototype Pollution in async CVE-2021-43138 Fix available 7.8 HighApril 6, 2022
• patterns-suse-manager SUSE pgjdbc Arbitrary File Write Vulnerability CVE-2022-26520 Fix availableDisputed 9.8 CriticalFebruary 16, 2022
• patterns-suse-manager SUSE Uncontrolled Resource Consumption in promhttp CVE-2022-21698 Fix available 7.5 HighFebruary 15, 2022
• patterns-suse-manager SUSE Unchecked Class Instantiation when providing Plugin Classes CVE-2022-21724 Fix available 7.0 HighFebruary 2, 2022
• patterns-suse-manager SUSE Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config... CVE-2021-40348 Fix available 8.8 HighOctober 27, 2021
• patterns-suse-manager SUSE Improper Neutralization of Special Elements used in a Command in Shell-quote CVE-2021-42740 Fix available 9.8 CriticalOctober 21, 2021
• patterns-suse-manager SUSE Exposure of Resource to Wrong Sphere in salt CVE-2021-21996 Fix available 7.5 HighSeptember 8, 2021
• patterns-suse-manager SUSE Command Injection in SaltStack Salt CVE-2021-31607 Fix available 7.8 HighApril 23, 2021
• patterns-suse-manager SUSE Infinite loop in Apache Tika's MP3 parser CVE-2021-28657 Fix available 5.5 MediumMarch 31, 2021
• patterns-suse-manager SUSE SQL Injection in Hibernate ORM CVE-2019-14900 Public exploitFix available 6.5 MediumJuly 6, 2020
• patterns-suse-manager SUSE jQuery has a potential XSS vulnerability CVE-2020-11022 Public exploitFix available EPSS 99.2% 6.9 MediumApril 29, 2020
• patterns-suse-manager SUSE Prototype Pollution in minimist CVE-2020-7598 Public exploitFix available 5.6 MediumMarch 11, 2020
• patterns-suse-manager SUSE A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity... CVE-2020-1693 8.6 HighFebruary 17, 2020
• patterns-suse-manager SUSE Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS) CVE-2019-16769 Fix available 4.2 MediumDecember 5, 2019
• patterns-suse-manager SUSE Allocation of Resources Without Limits or Throttling in Apache Tika CVE-2019-10088 Fix available 8.8 HighAugust 2, 2019
• patterns-suse-manager SUSE Allocation of Resources Without Limits or Throttling in Apache Tika CVE-2019-10094 Fix available 7.8 HighAugust 2, 2019
• patterns-suse-manager SUSE Allocation of Resources Without Limits or Throttling in Apache Tika CVE-2019-10093 Fix available 6.5 MediumAugust 2, 2019
• patterns-suse-manager SUSE Billion laughs attack in c3p0 CVE-2019-5427 Public exploitFix available 7.5 HighApril 22, 2019
• patterns-suse-manager SUSE XML External Entity Reference in mchange:c3p0 CVE-2018-20433 Public exploitFix available 9.8 CriticalDecember 24, 2018
• patterns-suse-manager SUSE Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially... CVE-2018-1077 7.5 HighMarch 14, 2018
• patterns-suse-manager SUSE Cobbler vulnerable to arbitrary code execution CVE-2017-1000469 Fix available 9.8 CriticalJanuary 3, 2018
• patterns-suse-manager SUSE Improper Neutralization of Input During Web Page Generation in Direct Web Remoting CVE-2014-5326 Fix available 4.3 MediumNovember 24, 2014