spacecmd vulnerabilities (SUSE)
260 vulnerabilities.
spacecmdSUSEMulti Linux Manager epxoses the plain text HTTP Proxy user:password in logs6.9 MediumspacecmdSUSEAn open redirect vulnerability has been identified in Grafana OSS organization switching...4.2 MediumspacecmdSUSEGrafana is vulnerable to XSS attacks through open redirects and path traversal7.6 HighspacecmdSUSEGrafana's insecure DingDing Alert integration exposes sensitive information4.3 MediumspacecmdSUSESensitive headers not cleared on cross-origin redirect in net/http6.8 MediumspacecmdSUSEReflected XSS in spacewalk-java5.6 MediumspacecmdSUSEReflected XSS in SystemsController.java in spacewalk-java5.6 MediumspacecmdSUSEHTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net4.4 MediumspacecmdSUSEGNU elfutils eu-readelf readelf.c process_symtab buffer overflow4.8 MediumspacecmdSUSESecurity update for SUSE Manager Client ToolsNo scorespacecmdSUSEMisuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto9.1 CriticalspacecmdSUSEDatabase password leaked by systemd uyuni-server-attestation service5.7 MediumspacecmdSUSEReflected XSS in Setup Wizard, Organization Credentials in spacewalk-web4.6 MediumspacecmdSUSEReflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web4.6 MediumspacecmdSUSECobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes9.8 CriticalspacecmdSUSEBad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt3.1 LowspacecmdSUSEGrafana alerting wrong permission on datasource rule write endpoint5.1 MediumspacecmdSUSEDenial of service via malicious preflight requests in github.com/rs/cors7.5 HighspacecmdSUSEgo-retryablehttp can leak basic auth credentials to log files6.0 MediumspacecmdSUSEHTTP/2 CONTINUATION flood in net/http7.5 HighspacecmdSUSEUsers outside an organization can delete a snapshot with its key6.5 MediumspacecmdSUSEIncorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http4.3 MediumspacecmdSUSEInsecure handling SSH key in SUSE Manager when bootstrapping new clients6.4 MediumspacecmdSUSEEmail Validation Bypass And Preventing Sign Up From Email's Owner5.4 MediumspacecmdSUSEAnsible-core: possible information leak in tasks that ignore ansible_no_log configuration5.0 MediumspacecmdSUSEJinja vulnerable to Cross-Site Scripting (XSS)5.4 MediumspacecmdSUSEjose4j denial of service via specifically crafted JWE6.5 MediumspacecmdSUSEAnsible: template injection7.1 HighspacecmdSUSEjose4j uses weak cryptographic algorithm7.5 HighspacecmdSUSEOpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics7.5 HighspacecmdSUSEAlertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint7.5 HighspacecmdSUSELarge RSA keys can cause high CPU usage in crypto/tls5.3 MediumspacecmdSUSEImproper rendering of text nodes in golang.org/x/net/html6.1 MediumspacecmdSUSEGrafana vulnerable to Authentication Bypass by Spoofing9.4 CriticalspacecmdSUSEJWT token compromise can allow malicious actions including Remote Code Execution (RCE)9.4 CriticalspacecmdSUSEGrafana has Broken Access Control in Alert manager: Viewer can send test alerts4.1 MediumspacecmdSUSEGrafana Missing Synchronization vulnerability7.5 HighspacecmdSUSEOpen redirect in Tornado6.1 MediumspacecmdSUSEGrafana is an open-source platform for monitoring and observability. Starting with the 9.1...4.2 MediumspacecmdSUSEStored XSS in Graphite FunctionDescription tooltip6.2 MediumspacecmdSUSEGrafana vulnerable to Cross-site Scripting7.3 HighspacecmdSUSEGrafana vulnerable to Cross-site Scripting7.3 HighspacecmdSUSEDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighspacecmdSUSEDrools: unsafe data deserialization in streamutils8.1 HighspacecmdSUSEGrafana stored XSS in FileUploader component7.3 HighspacecmdSUSEGrafana vulnerable to spoofing originalUrl of snapshots6.7 MediumspacecmdSUSEPrometheus Exporter Toolkit vulnerable to basic authentication bypass6.2 MediumspacecmdSUSEGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password6.7 MediumspacecmdSUSEGrafana contains Improper Input Validation6.4 MediumspacecmdSUSESUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do2.6 Low- Show moreLoading…