py26-compat-salt vulnerabilities (SUSE)
44 vulnerabilities.
py26-compat-saltSUSESpacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config...8.8 Highpy26-compat-saltSUSECobbler before 3.3.0 allows authorization bypass for modification of settings.7.5 Highpy26-compat-saltSUSECobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.7.5 Highpy26-compat-saltSUSECobbler before 3.3.0 allows log poisoning9.8 Criticalpy26-compat-saltSUSEExposure of Resource to Wrong Sphere in salt7.5 Highpy26-compat-saltSUSECommand Injection in SaltStack Salt7.8 Highpy26-compat-saltSUSEInfinite loop in Apache Tika's MP3 parser5.5 Mediumpy26-compat-saltSUSESaltStack Salt is vulnerable to shell injection via ProxyCommand argument9.8 Criticalpy26-compat-saltSUSESaltStack Salt command injection in the Salt-API when using the Salt-SSH client9.8 Criticalpy26-compat-saltSUSESaltStack Salt eauth tokens can be used once after expiration9.1 Criticalpy26-compat-saltSUSESaltStack Salt Cleartext Storage of Sensitive Information via cmdmod4.4 Mediumpy26-compat-saltSUSESaltStack Salt Server Side Template Injection9.8 Criticalpy26-compat-saltSUSESaltStack Salt Directory Traversal vulnerability9.1 Criticalpy26-compat-saltSUSESaltStack Salt Improper Authentication vulnerability9.8 Criticalpy26-compat-saltSUSESaltStack Salt Improper SSL Certificate Validation7.4 Highpy26-compat-saltSUSESaltStack Salt Improper Certificate Validation5.9 Mediumpy26-compat-saltSUSESaltStack Salt command injection via a crafted process name7.8 Highpy26-compat-saltSUSEPrototype Pollution7.5 Highpy26-compat-saltSUSEServer-Side Forgery Request can be activated unmarshalling with XStream6.3 Mediumpy26-compat-saltSUSEXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling6.8 Mediumpy26-compat-saltSUSERemote Code Execution in XStream8.0 Highpy26-compat-saltSUSESaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi9.8 Criticalpy26-compat-saltSUSESaltStack Salt Allows creating certificates with weak file permissions5.5 Mediumpy26-compat-saltSUSESaltStack Salt Command Injection in netapi ssh client9.8 Criticalpy26-compat-saltSUSEFile size limit bypass in node-fetch2.6 Lowpy26-compat-saltSUSEjQuery has a potential XSS vulnerability6.9 Mediumpy26-compat-saltSUSEPrototype Pollution in minimist5.6 Mediumpy26-compat-saltSUSEA flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity...8.6 Highpy26-compat-saltSUSEAffected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)4.2 Mediumpy26-compat-saltSUSEAllocation of Resources Without Limits or Throttling in Apache Tika8.8 Highpy26-compat-saltSUSEAllocation of Resources Without Limits or Throttling in Apache Tika7.8 Highpy26-compat-saltSUSEAllocation of Resources Without Limits or Throttling in Apache Tika6.5 Mediumpy26-compat-saltSUSEsusemanager installer creates world-readable swap files4.0 Mediumpy26-compat-saltSUSEApache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser6.5 Mediumpy26-compat-saltSUSEPowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4...5.3 Mediumpy26-compat-saltSUSEPowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor...5.3 Mediumpy26-compat-saltSUSESaltStack Salt Remote command execution and incorrect access control when using salt-api9.8 Criticalpy26-compat-saltSUSESaltStack Salt Directory Traversal vulnerability in salt-api5.3 Mediumpy26-compat-saltSUSESpacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially...7.5 Highpy26-compat-saltSUSECobbler vulnerable to arbitrary code execution9.8 Criticalpy26-compat-saltSUSESaltStack Salt Denial of Service via a crafted authentication request7.5 Highpy26-compat-saltSUSESaltStack Salt Directory traversal vulnerability in minion id validation9.8 Criticalpy26-compat-saltSUSEDenial of service in XStream7.5 Highpy26-compat-saltSUSEImproper Neutralization of Input During Web Page Generation in Direct Web Remoting4.3 Medium