spacewalk-backend vulnerabilities (SUSE)
81 vulnerabilities.
spacewalk-backendSUSEA flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity...8.6 Highspacewalk-backendSUSEAffected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)4.2 Mediumspacewalk-backendSUSEAllocation of Resources Without Limits or Throttling in Apache Tika8.8 Highspacewalk-backendSUSEAllocation of Resources Without Limits or Throttling in Apache Tika7.8 Highspacewalk-backendSUSEAllocation of Resources Without Limits or Throttling in Apache Tika6.5 Mediumspacewalk-backendSUSEIt was found that Spacewalk, all versions through 2.8, did not safely compute client token...4.3 Mediumspacewalk-backendSUSEA path traversal flaw was found in spacewalk-proxy, all versions through 2.8, in the way the...8.1 Highspacewalk-backendSUSEsusemanager installer creates world-readable swap files4.0 Mediumspacewalk-backendSUSEBillion laughs attack in c3p07.5 Highspacewalk-backendSUSEApache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser6.5 Mediumspacewalk-backendSUSEXML External Entity Reference in mchange:c3p09.8 Criticalspacewalk-backendSUSEModerate severity vulnerability that affects org.postgresql:pgjdbc-aggregate8.1 Highspacewalk-backendSUSESpacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially...7.5 Highspacewalk-backendSUSECVE-2017-5754 does not affect BellSoft software5.6 Mediumspacewalk-backendSUSECVE-2017-5753 does not affect BellSoft software5.6 Mediumspacewalk-backendSUSEImportant: kernel security, bug fix, and enhancement update5.6 Mediumspacewalk-backendSUSECobbler vulnerable to arbitrary code execution9.8 Criticalspacewalk-backendSUSEA cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red...4.3 Mediumspacewalk-backendSUSESaltStack Salt Denial of Service via a crafted authentication request7.5 Highspacewalk-backendSUSESaltStack Salt Directory traversal vulnerability in minion id validation9.8 Criticalspacewalk-backendSUSEA cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite...3.5 Lowspacewalk-backendSUSEJabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even...9.8 Criticalspacewalk-backendSUSEIt was found that spacewalk-channel can be used by a non-admin user or disabled users to perform...6.5 Mediumspacewalk-backendSUSEDenial of service in XStream7.5 Highspacewalk-backendSUSESalt allows deleted minions to read or write to minions with the same id9.1 Criticalspacewalk-backendSUSECross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote...6.1 Mediumspacewalk-backendSUSEMultiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers...6.1 Mediumspacewalk-backendSUSEMultiple cross-site scripting (XSS) vulnerabilities in the Web UI in Spacewalk and Red Hat...6.1 Mediumspacewalk-backendSUSEMultiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers...6.1 Mediumspacewalk-backendSUSECross-site scripting (XSS) vulnerability in spacewalk-java in Spacewalk and Red Hat Satellite 5.7...5.4 Mediumspacewalk-backendSUSEImproper Neutralization of Input During Web Page Generation in Direct Web Remoting4.3 Medium