python-hwdata vulnerabilities (SUSE)
52 vulnerabilities.
-
python-hwdataSUSE Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint 7.5 High -
python-hwdataSUSE Grafana vulnerable to Authentication Bypass by Spoofing 9.4 Critical -
python-hwdataSUSE Grafana has Broken Access Control in Alert manager: Viewer can send test alerts 4.1 Medium -
python-hwdataSUSE Grafana Missing Synchronization vulnerability 7.5 High -
python-hwdataSUSE Grafana is an open-source platform for monitoring and observability. Starting with the 9.1... 4.2 Medium -
python-hwdataSUSE Stored XSS in Graphite FunctionDescription tooltip 6.2 Medium -
python-hwdataSUSE Grafana vulnerable to Cross-site Scripting 7.3 High -
python-hwdataSUSE Grafana vulnerable to Cross-site Scripting 7.3 High -
python-hwdataSUSE Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net 7.5 High -
python-hwdataSUSE Grafana stored XSS in FileUploader component 7.3 High -
python-hwdataSUSE Grafana vulnerable to spoofing originalUrl of snapshots 6.7 Medium -
python-hwdataSUSE Prometheus Exporter Toolkit vulnerable to basic authentication bypass 6.2 Medium -
python-hwdataSUSE Grafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password 6.7 Medium -
python-hwdataSUSE Grafana contains Improper Input Validation 6.4 Medium -
python-hwdataSUSE Grafana users with email as a username can block other users from signing in 4.3 Medium -
python-hwdataSUSE Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins 6.8 Medium -
python-hwdataSUSE Grafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins 4.9 Medium -
python-hwdataSUSE Grafana plugin signature bypass vulnerability 6.1 Medium -
python-hwdataSUSE Denial of service via crafted Accept-Language header in golang.org/x/text/language 7.5 High -
python-hwdataSUSE Memory exhaustion when compiling regular expressions in regexp/syntax 7.5 High -
python-hwdataSUSE Grafana folders admin only permission privilege escalation 7.6 High -
python-hwdataSUSE Authentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin 6.6 Medium -
python-hwdataSUSE golang.org/x/net/http2 Denial of Service vulnerability 7.5 High -
python-hwdataSUSE Grafana account takeover via OAuth vulnerability 7.1 High -
python-hwdataSUSE Stored XSS in Grafana's Unified Alerting 7.3 High -
python-hwdataSUSE Grafana Enterprise datasource network restrictions bypass via HTTP redirects 6.6 Medium -
python-hwdataSUSE Prototype Pollution in async 7.8 High -
python-hwdataSUSE golang.org/x/crypto/ssh Denial of service via crafted Signer 7.5 High -
python-hwdataSUSE Uncontrolled Resource Consumption in promhttp 7.5 High -
python-hwdataSUSE Exposure of Sensitive Information in Grafana 4.3 Medium -
python-hwdataSUSE Cross Site Request Forgery in Grafana 6.3 Medium -
python-hwdataSUSE Cross site scripting in Grafana proxy 6.5 Medium -
python-hwdataSUSE OAuth Identity Token exposure in Grafana 4.3 Medium -
python-hwdataSUSE Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects 8.0 High -
python-hwdataSUSE Grafana directory traversal for `.cvs` files 4.3 Medium -
python-hwdataSUSE Directory Traversal in Grafana 4.3 Medium -
python-hwdataSUSE Grafana path traversal 7.5 High -
python-hwdataSUSE Cross organization admin control in Grafana 9.1 Critical -
python-hwdataSUSE Prototype Pollution in kriszyp/json-schema 9.8 Critical -
python-hwdataSUSE XSS vulnerability allowing arbitrary JavaScript execution 6.9 Medium -
python-hwdataSUSE Ansible discloses sensitive information in traceback error message 5.5 Medium -
python-hwdataSUSE Snapshot authentication bypass in grafana 9.8 Critical -
python-hwdataSUSE Improper Input Validation and Command Injection in Ansible 7.1 High -
python-hwdataSUSE Inefficient Regular Expression Complexity in chalk/ansi-regex 7.5 High -
python-hwdataSUSE SM2 Decryption Buffer Overflow 9.8 Critical -
python-hwdataSUSE ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka... 7.5 High -
python-hwdataSUSE A flaw was found in several ansible modules, where parameters containing credentials, such as... 5.5 Medium -
python-hwdataSUSE Ansible Exposes Sensitive Information 7.5 High -
python-hwdataSUSE Insertion of Sensitive Information into Log File in ansible 5.5 Medium -
python-hwdataSUSE Insertion of Sensitive Information into Log File in ansible 5.5 Medium - Show olderLoading…