salt-netapi-client vulnerabilities (SUSE)
31 vulnerabilities.
-
salt-netapi-clientSUSE Drools: unsafe data deserialization in streamutils 8.1 High -
salt-netapi-clientSUSE Stack Buffer Overflow in Woodstox 6.5 Medium -
salt-netapi-clientSUSE Inefficient Regular Expression Complexity in moment 7.5 High -
salt-netapi-clientSUSE SUMA user enumeration via weak error message 5.3 Medium -
salt-netapi-clientSUSE SUMA unauthenticated remote DoS via resource exhaustion 7.5 High -
salt-netapi-clientSUSE XML External Entity Reference in drools 9.8 Critical -
salt-netapi-clientSUSE Prototype Pollution in async 7.8 High -
salt-netapi-clientSUSE Prototype Pollution in minimist 9.8 Critical -
salt-netapi-clientSUSE Improper Authorization in cobbler/cobbler 8.2 High -
salt-netapi-clientSUSE Improper Neutralization of Special Elements used in a Command in Shell-quote 9.8 Critical -
salt-netapi-clientSUSE SQL injection in hibernate-core 7.4 High -
salt-netapi-clientSUSE SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi 9.8 Critical -
salt-netapi-clientSUSE SaltStack Salt Allows creating certificates with weak file permissions 5.5 Medium -
salt-netapi-clientSUSE SaltStack Salt Command Injection in netapi ssh client 9.8 Critical -
salt-netapi-clientSUSE salt-api is accessible to every user on SUSE Manager Server 9.3 Critical -
salt-netapi-clientSUSE File size limit bypass in node-fetch 2.6 Low -
salt-netapi-clientSUSE SQL Injection in Hibernate ORM 6.5 Medium -
salt-netapi-clientSUSE Improper Restriction of XML External Entity Reference 7.7 High -
salt-netapi-clientSUSE jQuery has a potential XSS vulnerability 6.9 Medium -
salt-netapi-clientSUSE A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity... 8.6 High -
salt-netapi-clientSUSE Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS) 4.2 Medium -
salt-netapi-clientSUSE susemanager installer creates world-readable swap files 4.0 Medium -
salt-netapi-clientSUSE High severity vulnerability that affects org.apache.tika:tika-core 7.5 High -
salt-netapi-clientSUSE Moderate severity vulnerability that affects org.postgresql:pgjdbc-aggregate 8.1 High -
salt-netapi-clientSUSE Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially... 7.5 High -
salt-netapi-clientSUSE Cobbler vulnerable to arbitrary code execution 9.8 Critical -
salt-netapi-clientSUSE A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red... 4.3 Medium -
salt-netapi-clientSUSE A cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite... 3.5 Low -
salt-netapi-clientSUSE JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even... 9.8 Critical -
salt-netapi-clientSUSE It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform... 6.5 Medium -
salt-netapi-clientSUSE Improper Neutralization of Input During Web Page Generation in Direct Web Remoting 4.3 Medium