release-notes-susemanager vulnerabilities (SUSE)
93 vulnerabilities.
-
release-notes-susemanagerSUSE Salt Master authentication protocol downgrade may enable minion impersonation 7.5 High -
release-notes-susemanagerSUSE Salt junos module uses an unsafe YAML loader which may allow unintended code execution 7.3 High -
release-notes-susemanagerSUSE OpenFGA Improper Policy Enforcement 5.8 Medium -
release-notes-susemanagerSUSE susemanager-tftpsync-recv allows arbitrary file creation and deletion due to path traversal 8.7 High -
release-notes-susemanagerSUSE spacewalk-java has various XSS issues on search page 9.3 Critical -
release-notes-susemanagerSUSE Infinite parsing loop in golang.org/x/net 5.3 Medium -
release-notes-susemanagerSUSE Quadratic parsing complexity in golang.org/x/net/html 5.3 Medium -
release-notes-susemanagerSUSE Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure 5.3 Medium -
release-notes-susemanagerSUSE Apache Commons OGNL: Expression Injection leading to RCE 8.8 High -
release-notes-susemanagerSUSE SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint 9.3 Critical -
release-notes-susemanagerSUSE Multi Linux Manager epxoses the plain text HTTP Proxy user:password in logs 6.9 Medium -
release-notes-susemanagerSUSE CVE-2024-38824 salt advisory 9.6 Critical -
release-notes-susemanagerSUSE CVE-2025-22242 salt advisory 5.6 Medium -
release-notes-susemanagerSUSE CVE-2025-22241 salt advisory 5.6 Medium -
release-notes-susemanagerSUSE CVE-2025-22240 salt advisory 6.3 Medium -
release-notes-susemanagerSUSE CVE-2025-22239 salt advisory 8.1 High -
release-notes-susemanagerSUSE CVE-2025-22238 salt advisory 4.2 Medium -
release-notes-susemanagerSUSE CVE-2025-22237 salt advisory 6.7 Medium -
release-notes-susemanagerSUSE CVE-2025-22236 salt advisory 8.1 High -
release-notes-susemanagerSUSE CVE-2024-38825 Salt Advisory 6.4 Medium -
release-notes-susemanagerSUSE CVE-2024-38823 Salt Advisory 2.7 Low -
release-notes-susemanagerSUSE CVE-2024-38822 Salt Advisory 2.7 Low -
release-notes-susemanagerSUSE Reflected XSS in spacewalk-java 5.6 Medium -
release-notes-susemanagerSUSE An access control vulnerability was discovered in Grafana OSS where an Organization administrator... 5.5 Medium -
release-notes-susemanagerSUSE Grafana Cross-Site-Scripting (XSS) via custom loaded frontend plugin 7.6 High -
release-notes-susemanagerSUSE Grafana's datasource proxy API allows authorization checks to be bypassed 5.0 Medium -
release-notes-susemanagerSUSE The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor... 6.8 Medium -
release-notes-susemanagerSUSE Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net 6.5 Medium -
release-notes-susemanagerSUSE Reflected XSS in SystemsController.java in spacewalk-java 5.6 Medium -
release-notes-susemanagerSUSE HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 4.4 Medium -
release-notes-susemanagerSUSE Go JOSE's Parsing Vulnerable to Denial of Service 6.6 Medium -
release-notes-susemanagerSUSE Grafana Alerting VictorOps integration could be exposed to users with Viewer permission 4.3 Medium -
release-notes-susemanagerSUSE Vulnerability when creating log files in github.com/golang/glog 7.1 High -
release-notes-susemanagerSUSE Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto 9.1 Critical -
release-notes-susemanagerSUSE Reflected XSS in Setup Wizard, Organization Credentials in spacewalk-web 4.6 Medium -
release-notes-susemanagerSUSE Reflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web 4.6 Medium -
release-notes-susemanagerSUSE Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes 9.8 Critical -
release-notes-susemanagerSUSE Privilege escalation vulnerability for Organizations in Grafana 5.1 Medium -
release-notes-susemanagerSUSE Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 3.1 Low -
release-notes-susemanagerSUSE Grafana SQL Expressions allow for remote code execution 9.4 Critical -
release-notes-susemanagerSUSE HTTP/2 CONTINUATION flood in net/http 7.5 High -
release-notes-susemanagerSUSE Specially crafted url can be created which leads to a directory traversal in the salt file server 7.7 High -
release-notes-susemanagerSUSE Syndic cache directory creation is vulnerable to a directory traversal attack 5.0 Medium -
release-notes-susemanagerSUSE Insecure handling SSH key in SUSE Manager when bootstrapping new clients 6.4 Medium -
release-notes-susemanagerSUSE jose4j denial of service via specifically crafted JWE 6.5 Medium -
release-notes-susemanagerSUSE Salt security advisory release - 2023-OCT-27 6.7 Medium -
release-notes-susemanagerSUSE Denial of Service attack on windows app using Netty 5.5 Medium -
release-notes-susemanagerSUSE Salt can cause Git Providers to get wrong data 4.2 Medium -
release-notes-susemanagerSUSE Salt vulnerable to denial of service 5.3 Medium -
release-notes-susemanagerSUSE Large RSA keys can cause high CPU usage in crypto/tls 5.3 Medium - Show olderLoading…