spacewalk-client-tools vulnerabilities (SUSE)
225 vulnerabilities.
spacewalk-client-toolsSUSECross site scripting in Grafana proxy6.5 Mediumspacewalk-client-toolsSUSEOAuth Identity Token exposure in Grafana4.3 Mediumspacewalk-client-toolsSUSEExposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects8.0 Highspacewalk-client-toolsSUSEGrafana directory traversal for `.cvs` files4.3 Mediumspacewalk-client-toolsSUSEDirectory Traversal in Grafana4.3 Mediumspacewalk-client-toolsSUSEGrafana path traversal7.5 Highspacewalk-client-toolsSUSECross organization admin control in Grafana9.1 Criticalspacewalk-client-toolsSUSEPrototype Pollution in kriszyp/json-schema9.8 Criticalspacewalk-client-toolsSUSEXSS vulnerability allowing arbitrary JavaScript execution6.9 Mediumspacewalk-client-toolsSUSESpacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config...8.8 Highspacewalk-client-toolsSUSEAnsible discloses sensitive information in traceback error message5.5 Mediumspacewalk-client-toolsSUSEImproper Neutralization of Special Elements used in a Command in Shell-quote9.8 Criticalspacewalk-client-toolsSUSESnapshot authentication bypass in grafana9.8 Criticalspacewalk-client-toolsSUSEImproper Input Validation and Command Injection in Ansible7.1 Highspacewalk-client-toolsSUSECobbler before 3.3.0 allows authorization bypass for modification of settings.7.5 Highspacewalk-client-toolsSUSECobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.7.5 Highspacewalk-client-toolsSUSECobbler before 3.3.0 allows log poisoning9.8 Criticalspacewalk-client-toolsSUSEInefficient Regular Expression Complexity in chalk/ansi-regex7.5 Highspacewalk-client-toolsSUSEExposure of Resource to Wrong Sphere in salt7.5 Highspacewalk-client-toolsSUSESM2 Decryption Buffer Overflow9.8 Criticalspacewalk-client-toolsSUSEec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.5 Highspacewalk-client-toolsSUSEArbitrary redirects under /new endpoint6.5 Mediumspacewalk-client-toolsSUSECommand Injection in SaltStack Salt7.8 Highspacewalk-client-toolsSUSEA flaw was found in several ansible modules, where parameters containing credentials, such as...5.5 Mediumspacewalk-client-toolsSUSEOne of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7...7.5 Highspacewalk-client-toolsSUSEThe team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x...6.5 Mediumspacewalk-client-toolsSUSEThe team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control...6.5 Mediumspacewalk-client-toolsSUSEGrafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor...7.1 Highspacewalk-client-toolsSUSEAnsible Exposes Sensitive Information7.5 Highspacewalk-client-toolsSUSEInsertion of Sensitive Information into Log File in ansible5.5 Mediumspacewalk-client-toolsSUSEInsertion of Sensitive Information into Log File in ansible5.5 Mediumspacewalk-client-toolsSUSEInsertion of Sensitive Information into Log File in ansible5.5 Mediumspacewalk-client-toolsSUSEPrototype Pollution7.5 Highspacewalk-client-toolsSUSEServer-Side Forgery Request can be activated unmarshalling with XStream6.3 Mediumspacewalk-client-toolsSUSEXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling6.8 Mediumspacewalk-client-toolsSUSESQL injection in hibernate-core7.4 Highspacewalk-client-toolsSUSERemote Code Execution in XStream8.0 Highspacewalk-client-toolsSUSESaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi9.8 Criticalspacewalk-client-toolsSUSESaltStack Salt Allows creating certificates with weak file permissions5.5 Mediumspacewalk-client-toolsSUSESaltStack Salt Command Injection in netapi ssh client9.8 Criticalspacewalk-client-toolsSUSERegular Expression Denial of Service (ReDoS)7.5 Highspacewalk-client-toolsSUSEInsertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible5.5 Mediumspacewalk-client-toolsSUSEImproper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible5.0 Mediumspacewalk-client-toolsSUSEFile size limit bypass in node-fetch2.6 Lowspacewalk-client-toolsSUSEImproper Verification of Cryptographic Signature in ansible7.1 Highspacewalk-client-toolsSUSESQL Injection in Hibernate ORM6.5 Mediumspacewalk-client-toolsSUSEImproper Restriction of XML External Entity Reference7.7 Highspacewalk-client-toolsSUSEServer Side Request Forgery in Grafana8.2 Highspacewalk-client-toolsSUSEExposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible5.0 Mediumspacewalk-client-toolsSUSEjQuery has a potential XSS vulnerability6.9 Medium- Show moreLoading…