rhnlib vulnerabilities (SUSE)
128 vulnerabilities.
rhnlibSUSEDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighrhnlibSUSEDrools: unsafe data deserialization in streamutils8.1 HighrhnlibSUSEGrafana stored XSS in FileUploader component7.3 HighrhnlibSUSEGrafana vulnerable to spoofing originalUrl of snapshots6.7 MediumrhnlibSUSEPrometheus Exporter Toolkit vulnerable to basic authentication bypass6.2 MediumrhnlibSUSEGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password6.7 MediumrhnlibSUSEGrafana contains Improper Input Validation6.4 MediumrhnlibSUSEGrafana users with email as a username can block other users from signing in4.3 MediumrhnlibSUSEData source and plugin proxy endpoints could leak the authentication cookie to some destination plugins6.8 MediumrhnlibSUSEGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins4.9 MediumrhnlibSUSEGrafana plugin signature bypass vulnerability6.1 MediumrhnlibSUSEDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 HighrhnlibSUSEMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighrhnlibSUSEGrafana folders admin only permission privilege escalation7.6 HighrhnlibSUSEAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 MediumrhnlibSUSEStack Buffer Overflow in Woodstox6.5 MediumrhnlibSUSEgolang.org/x/net/http2 Denial of Service vulnerability7.5 HighrhnlibSUSEGrafana account takeover via OAuth vulnerability7.1 HighrhnlibSUSEStored XSS in Grafana's Unified Alerting7.3 HighrhnlibSUSEInefficient Regular Expression Complexity in moment7.5 HighrhnlibSUSEGrafana Enterprise datasource network restrictions bypass via HTTP redirects6.6 MediumrhnlibSUSEPrototype Pollution in async7.8 HighrhnlibSUSEgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 HighrhnlibSUSEImproper Authorization in cobbler/cobbler8.2 HighrhnlibSUSEUncontrolled Resource Consumption in promhttp7.5 HighrhnlibSUSEExposure of Sensitive Information in Grafana4.3 MediumrhnlibSUSECross Site Request Forgery in Grafana6.3 MediumrhnlibSUSECross site scripting in Grafana proxy6.5 MediumrhnlibSUSEOAuth Identity Token exposure in Grafana4.3 MediumrhnlibSUSEExposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects8.0 HighrhnlibSUSEGrafana directory traversal for `.cvs` files4.3 MediumrhnlibSUSEDirectory Traversal in Grafana4.3 MediumrhnlibSUSEGrafana path traversal7.5 HighrhnlibSUSECross organization admin control in Grafana9.1 CriticalrhnlibSUSEPrototype Pollution in kriszyp/json-schema9.8 CriticalrhnlibSUSEXSS vulnerability allowing arbitrary JavaScript execution6.9 MediumrhnlibSUSEAnsible discloses sensitive information in traceback error message5.5 MediumrhnlibSUSEImproper Neutralization of Special Elements used in a Command in Shell-quote9.8 CriticalrhnlibSUSESnapshot authentication bypass in grafana9.8 CriticalrhnlibSUSEImproper Input Validation and Command Injection in Ansible7.1 HighrhnlibSUSEInefficient Regular Expression Complexity in chalk/ansi-regex7.5 HighrhnlibSUSESM2 Decryption Buffer Overflow9.8 CriticalrhnlibSUSEec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.5 HighrhnlibSUSEArbitrary redirects under /new endpoint6.5 MediumrhnlibSUSECommand Injection in SaltStack Salt7.8 HighrhnlibSUSEA flaw was found in several ansible modules, where parameters containing credentials, such as...5.5 MediumrhnlibSUSEOne of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7...7.5 HighrhnlibSUSEThe team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x...6.5 MediumrhnlibSUSEThe team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control...6.5 MediumrhnlibSUSEGrafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor...7.1 High- Show moreLoading…