saltboot-formula vulnerabilities (SUSE)
30 vulnerabilities.
-
saltboot-formulaSUSE Reflected XSS in Setup Wizard, Organization Credentials in spacewalk-web 4.6 Medium -
saltboot-formulaSUSE Reflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web 4.6 Medium -
saltboot-formulaSUSE Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes 9.8 Critical -
saltboot-formulaSUSE Insecure handling SSH key in SUSE Manager when bootstrapping new clients 6.4 Medium -
saltboot-formulaSUSE jose4j uses weak cryptographic algorithm 7.5 High -
saltboot-formulaSUSE Large RSA keys can cause high CPU usage in crypto/tls 5.3 Medium -
saltboot-formulaSUSE Drools: unsafe data deserialization in streamutils 8.1 High -
saltboot-formulaSUSE Stack Buffer Overflow in Woodstox 6.5 Medium -
saltboot-formulaSUSE Inefficient Regular Expression Complexity in moment 7.5 High -
saltboot-formulaSUSE XML External Entity Reference in drools 9.8 Critical -
saltboot-formulaSUSE Prototype Pollution in async 7.8 High -
saltboot-formulaSUSE Improper Authorization in cobbler/cobbler 8.2 High -
saltboot-formulaSUSE Improper Neutralization of Special Elements used in a Command in Shell-quote 9.8 Critical -
saltboot-formulaSUSE Cobbler before 3.3.0 allows authorization bypass for modification of settings. 7.5 High -
saltboot-formulaSUSE Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data. 7.5 High -
saltboot-formulaSUSE Cobbler before 3.3.0 allows log poisoning 9.8 Critical -
saltboot-formulaSUSE SQL injection in hibernate-core 7.4 High -
saltboot-formulaSUSE SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi 9.8 Critical -
saltboot-formulaSUSE SaltStack Salt Allows creating certificates with weak file permissions 5.5 Medium -
saltboot-formulaSUSE SaltStack Salt Command Injection in netapi ssh client 9.8 Critical -
saltboot-formulaSUSE salt-api is accessible to every user on SUSE Manager Server 9.3 Critical -
saltboot-formulaSUSE File size limit bypass in node-fetch 2.6 Low -
saltboot-formulaSUSE SQL Injection in Hibernate ORM 6.5 Medium -
saltboot-formulaSUSE Improper Restriction of XML External Entity Reference 7.7 High -
saltboot-formulaSUSE jQuery has a potential XSS vulnerability 6.9 Medium -
saltboot-formulaSUSE Prototype Pollution in minimist 5.6 Medium -
saltboot-formulaSUSE Billion laughs attack in c3p0 7.5 High -
saltboot-formulaSUSE Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser 6.5 Medium -
saltboot-formulaSUSE XML External Entity Reference in mchange:c3p0 9.8 Critical -
saltboot-formulaSUSE High severity vulnerability that affects org.apache.tika:tika-core 7.5 High