spacewalk-admin vulnerabilities (SUSE)
38 vulnerabilities.
-
spacewalk-adminSUSE SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint 9.3 Critical -
spacewalk-adminSUSE Multi Linux Manager epxoses the plain text HTTP Proxy user:password in logs 6.9 Medium -
spacewalk-adminSUSE Reflected XSS in spacewalk-java 5.6 Medium -
spacewalk-adminSUSE Reflected XSS in SystemsController.java in spacewalk-java 5.6 Medium -
spacewalk-adminSUSE Large RSA keys can cause high CPU usage in crypto/tls 5.3 Medium -
spacewalk-adminSUSE JWT token compromise can allow malicious actions including Remote Code Execution (RCE) 9.4 Critical -
spacewalk-adminSUSE Drools: unsafe data deserialization in streamutils 8.1 High -
spacewalk-adminSUSE Stack Buffer Overflow in Woodstox 6.5 Medium -
spacewalk-adminSUSE Inefficient Regular Expression Complexity in moment 7.5 High -
spacewalk-adminSUSE SUMA user enumeration via weak error message 5.3 Medium -
spacewalk-adminSUSE XML External Entity Reference in drools 9.8 Critical -
spacewalk-adminSUSE Prototype Pollution in async 7.8 High -
spacewalk-adminSUSE Improper Authorization in cobbler/cobbler 8.2 High -
spacewalk-adminSUSE Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config... 8.8 High -
spacewalk-adminSUSE Improper Neutralization of Special Elements used in a Command in Shell-quote 9.8 Critical -
spacewalk-adminSUSE Exposure of Resource to Wrong Sphere in salt 7.5 High -
spacewalk-adminSUSE Command Injection in SaltStack Salt 7.8 High -
spacewalk-adminSUSE Infinite loop in Apache Tika's MP3 parser 5.5 Medium -
spacewalk-adminSUSE SQL injection in hibernate-core 7.4 High -
spacewalk-adminSUSE SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi 9.8 Critical -
spacewalk-adminSUSE SaltStack Salt Allows creating certificates with weak file permissions 5.5 Medium -
spacewalk-adminSUSE SaltStack Salt Command Injection in netapi ssh client 9.8 Critical -
spacewalk-adminSUSE salt-api is accessible to every user on SUSE Manager Server 9.3 Critical -
spacewalk-adminSUSE File size limit bypass in node-fetch 2.6 Low -
spacewalk-adminSUSE SQL Injection in Hibernate ORM 6.5 Medium -
spacewalk-adminSUSE Improper Restriction of XML External Entity Reference 7.7 High -
spacewalk-adminSUSE jQuery has a potential XSS vulnerability 6.9 Medium -
spacewalk-adminSUSE A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity... 8.6 High -
spacewalk-adminSUSE Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS) 4.2 Medium -
spacewalk-adminSUSE Allocation of Resources Without Limits or Throttling in Apache Tika 8.8 High -
spacewalk-adminSUSE Allocation of Resources Without Limits or Throttling in Apache Tika 7.8 High -
spacewalk-adminSUSE Allocation of Resources Without Limits or Throttling in Apache Tika 6.5 Medium -
spacewalk-adminSUSE Billion laughs attack in c3p0 7.5 High -
spacewalk-adminSUSE Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser 6.5 Medium -
spacewalk-adminSUSE XML External Entity Reference in mchange:c3p0 9.8 Critical -
spacewalk-adminSUSE Moderate severity vulnerability that affects org.postgresql:pgjdbc-aggregate 8.1 High -
spacewalk-adminSUSE Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially... 7.5 High -
spacewalk-adminSUSE Denial of service in XStream 7.5 High