spacewalk-certs-tools vulnerabilities (SUSE)
53 vulnerabilities.
spacewalk-certs-toolsSUSEReflected XSS in Setup Wizard, Organization Credentials in spacewalk-web4.6 Mediumspacewalk-certs-toolsSUSEReflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web4.6 Mediumspacewalk-certs-toolsSUSECobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes9.8 Criticalspacewalk-certs-toolsSUSEInsecure handling SSH key in SUSE Manager when bootstrapping new clients6.4 Mediumspacewalk-certs-toolsSUSEjose4j denial of service via specifically crafted JWE6.5 Mediumspacewalk-certs-toolsSUSEjose4j uses weak cryptographic algorithm7.5 Highspacewalk-certs-toolsSUSELarge RSA keys can cause high CPU usage in crypto/tls5.3 Mediumspacewalk-certs-toolsSUSEJWT token compromise can allow malicious actions including Remote Code Execution (RCE)9.4 Criticalspacewalk-certs-toolsSUSEDrools: unsafe data deserialization in streamutils8.1 Highspacewalk-certs-toolsSUSEStack Buffer Overflow in Woodstox6.5 Mediumspacewalk-certs-toolsSUSEInefficient Regular Expression Complexity in moment7.5 Highspacewalk-certs-toolsSUSESUMA user enumeration via weak error message5.3 Mediumspacewalk-certs-toolsSUSESUMA unauthenticated remote DoS via resource exhaustion7.5 Highspacewalk-certs-toolsSUSEXML External Entity Reference in drools9.8 Criticalspacewalk-certs-toolsSUSEPrototype Pollution in async7.8 Highspacewalk-certs-toolsSUSEPrototype Pollution in minimist9.8 Criticalspacewalk-certs-toolsSUSEImproper Authorization in cobbler/cobbler8.2 Highspacewalk-certs-toolsSUSESpacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config...8.8 Highspacewalk-certs-toolsSUSEImproper Neutralization of Special Elements used in a Command in Shell-quote9.8 Criticalspacewalk-certs-toolsSUSECobbler before 3.3.0 allows authorization bypass for modification of settings.7.5 Highspacewalk-certs-toolsSUSECobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.7.5 Highspacewalk-certs-toolsSUSECobbler before 3.3.0 allows log poisoning9.8 Criticalspacewalk-certs-toolsSUSEExposure of Resource to Wrong Sphere in salt7.5 Highspacewalk-certs-toolsSUSECommand Injection in SaltStack Salt7.8 Highspacewalk-certs-toolsSUSEInfinite loop in Apache Tika's MP3 parser5.5 Mediumspacewalk-certs-toolsSUSEAn XML external entity (XXE) injection vulnerability exists in the Nutch DmozParser9.1 Criticalspacewalk-certs-toolsSUSESQL injection in hibernate-core7.4 Highspacewalk-certs-toolsSUSEsalt-api is accessible to every user on SUSE Manager Server9.3 Criticalspacewalk-certs-toolsSUSESQL Injection in Hibernate ORM6.5 Mediumspacewalk-certs-toolsSUSEImproper Restriction of XML External Entity Reference7.7 Highspacewalk-certs-toolsSUSEjQuery has a potential XSS vulnerability6.9 Mediumspacewalk-certs-toolsSUSEPrototype Pollution in minimist5.6 Mediumspacewalk-certs-toolsSUSEA flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity...8.6 Highspacewalk-certs-toolsSUSEAffected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)4.2 Mediumspacewalk-certs-toolsSUSEAllocation of Resources Without Limits or Throttling in Apache Tika8.8 Highspacewalk-certs-toolsSUSEAllocation of Resources Without Limits or Throttling in Apache Tika7.8 Highspacewalk-certs-toolsSUSEAllocation of Resources Without Limits or Throttling in Apache Tika6.5 Mediumspacewalk-certs-toolsSUSEsusemanager installer creates world-readable swap files4.0 Mediumspacewalk-certs-toolsSUSEBillion laughs attack in c3p07.5 Highspacewalk-certs-toolsSUSEXML External Entity Reference in mchange:c3p09.8 Criticalspacewalk-certs-toolsSUSESpacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially...7.5 Highspacewalk-certs-toolsSUSECobbler vulnerable to arbitrary code execution9.8 Criticalspacewalk-certs-toolsSUSEA cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red...4.3 Mediumspacewalk-certs-toolsSUSEA cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite...3.5 Lowspacewalk-certs-toolsSUSEJabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even...9.8 Criticalspacewalk-certs-toolsSUSEIt was found that spacewalk-channel can be used by a non-admin user or disabled users to perform...6.5 Mediumspacewalk-certs-toolsSUSEDenial of service in XStream7.5 Highspacewalk-certs-toolsSUSECross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote...6.1 Mediumspacewalk-certs-toolsSUSEMultiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers...6.1 Mediumspacewalk-certs-toolsSUSEMultiple cross-site scripting (XSS) vulnerabilities in the Web UI in Spacewalk and Red Hat...6.1 Medium- Show olderLoading…