spacecmd vulnerabilities (SUSE)
260 vulnerabilities.
spacecmdSUSESUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload4.3 MediumspacecmdSUSESUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction4.3 MediumspacecmdSUSEGrafana users with email as a username can block other users from signing in4.3 MediumspacecmdSUSEData source and plugin proxy endpoints could leak the authentication cookie to some destination plugins6.8 MediumspacecmdSUSEGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins4.9 MediumspacecmdSUSEGrafana plugin signature bypass vulnerability6.1 MediumspacecmdSUSEDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 HighspacecmdSUSEMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighspacecmdSUSEGrafana folders admin only permission privilege escalation7.6 HighspacecmdSUSEAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 MediumspacecmdSUSEStack Buffer Overflow in Woodstox6.5 MediumspacecmdSUSEgolang.org/x/net/http2 Denial of Service vulnerability7.5 HighspacecmdSUSEGrafana account takeover via OAuth vulnerability7.1 HighspacecmdSUSEStored XSS in Grafana's Unified Alerting7.3 HighspacecmdSUSEInefficient Regular Expression Complexity in moment7.5 HighspacecmdSUSESUMA user enumeration via weak error message5.3 MediumspacecmdSUSESUMA unauthenticated remote DoS via resource exhaustion7.5 HighspacecmdSUSEXML External Entity Reference in drools9.8 CriticalspacecmdSUSEGrafana Enterprise datasource network restrictions bypass via HTTP redirects6.6 MediumspacecmdSUSEPrototype Pollution in async7.8 HighspacecmdSUSEgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 HighspacecmdSUSEPrototype Pollution in minimist9.8 CriticalspacecmdSUSEImproper Authorization in cobbler/cobbler8.2 HighspacecmdSUSEpgjdbc Arbitrary File Write Vulnerability9.8 CriticalspacecmdSUSEUncontrolled Resource Consumption in promhttp7.5 HighspacecmdSUSEExposure of Sensitive Information in Grafana4.3 MediumspacecmdSUSECross Site Request Forgery in Grafana6.3 MediumspacecmdSUSECross site scripting in Grafana proxy6.5 MediumspacecmdSUSEUnchecked Class Instantiation when providing Plugin Classes7.0 HighspacecmdSUSEOAuth Identity Token exposure in Grafana4.3 MediumspacecmdSUSEExposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects8.0 HighspacecmdSUSEGrafana directory traversal for `.cvs` files4.3 MediumspacecmdSUSEDirectory Traversal in Grafana4.3 MediumspacecmdSUSEGrafana path traversal7.5 HighspacecmdSUSECross organization admin control in Grafana9.1 CriticalspacecmdSUSEPrototype Pollution in kriszyp/json-schema9.8 CriticalspacecmdSUSEXSS vulnerability allowing arbitrary JavaScript execution6.9 MediumspacecmdSUSESpacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config...8.8 HighspacecmdSUSEAnsible discloses sensitive information in traceback error message5.5 MediumspacecmdSUSEImproper Neutralization of Special Elements used in a Command in Shell-quote9.8 CriticalspacecmdSUSESnapshot authentication bypass in grafana9.8 CriticalspacecmdSUSEImproper Input Validation and Command Injection in Ansible7.1 HighspacecmdSUSECobbler before 3.3.0 allows authorization bypass for modification of settings.7.5 HighspacecmdSUSECobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.7.5 HighspacecmdSUSECobbler before 3.3.0 allows log poisoning9.8 CriticalspacecmdSUSEInefficient Regular Expression Complexity in chalk/ansi-regex7.5 HighspacecmdSUSEExposure of Resource to Wrong Sphere in salt7.5 HighspacecmdSUSESM2 Decryption Buffer Overflow9.8 CriticalspacecmdSUSEec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.5 HighspacecmdSUSEArbitrary redirects under /new endpoint6.5 Medium- Show moreLoading…