spacewalk-client-tools vulnerabilities (SUSE)
225 vulnerabilities.
spacewalk-client-toolsSUSEHTTP/2 CONTINUATION flood in net/http7.5 Highspacewalk-client-toolsSUSEUsers outside an organization can delete a snapshot with its key6.5 Mediumspacewalk-client-toolsSUSEIncorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http4.3 Mediumspacewalk-client-toolsSUSEInsecure handling SSH key in SUSE Manager when bootstrapping new clients6.4 Mediumspacewalk-client-toolsSUSEEmail Validation Bypass And Preventing Sign Up From Email's Owner5.4 Mediumspacewalk-client-toolsSUSEAnsible-core: possible information leak in tasks that ignore ansible_no_log configuration5.0 Mediumspacewalk-client-toolsSUSEJinja vulnerable to Cross-Site Scripting (XSS)5.4 Mediumspacewalk-client-toolsSUSEjose4j denial of service via specifically crafted JWE6.5 Mediumspacewalk-client-toolsSUSEAnsible: template injection7.1 Highspacewalk-client-toolsSUSEjose4j uses weak cryptographic algorithm7.5 Highspacewalk-client-toolsSUSEAlertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint7.5 Highspacewalk-client-toolsSUSEImproper rendering of text nodes in golang.org/x/net/html6.1 Mediumspacewalk-client-toolsSUSEGrafana vulnerable to Authentication Bypass by Spoofing9.4 Criticalspacewalk-client-toolsSUSEGrafana has Broken Access Control in Alert manager: Viewer can send test alerts4.1 Mediumspacewalk-client-toolsSUSEGrafana Missing Synchronization vulnerability7.5 Highspacewalk-client-toolsSUSEGrafana is an open-source platform for monitoring and observability. Starting with the 9.1...4.2 Mediumspacewalk-client-toolsSUSEStored XSS in Graphite FunctionDescription tooltip6.2 Mediumspacewalk-client-toolsSUSEGrafana vulnerable to Cross-site Scripting7.3 Highspacewalk-client-toolsSUSEGrafana vulnerable to Cross-site Scripting7.3 Highspacewalk-client-toolsSUSEDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 Highspacewalk-client-toolsSUSEDrools: unsafe data deserialization in streamutils8.1 Highspacewalk-client-toolsSUSEGrafana stored XSS in FileUploader component7.3 Highspacewalk-client-toolsSUSEGrafana vulnerable to spoofing originalUrl of snapshots6.7 Mediumspacewalk-client-toolsSUSEPrometheus Exporter Toolkit vulnerable to basic authentication bypass6.2 Mediumspacewalk-client-toolsSUSEGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password6.7 Mediumspacewalk-client-toolsSUSEGrafana contains Improper Input Validation6.4 Mediumspacewalk-client-toolsSUSESUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do2.6 Lowspacewalk-client-toolsSUSESUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload4.3 Mediumspacewalk-client-toolsSUSESUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction4.3 Mediumspacewalk-client-toolsSUSEGrafana users with email as a username can block other users from signing in4.3 Mediumspacewalk-client-toolsSUSEData source and plugin proxy endpoints could leak the authentication cookie to some destination plugins6.8 Mediumspacewalk-client-toolsSUSEGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins4.9 Mediumspacewalk-client-toolsSUSEGrafana plugin signature bypass vulnerability6.1 Mediumspacewalk-client-toolsSUSEDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 Highspacewalk-client-toolsSUSEMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highspacewalk-client-toolsSUSEGrafana folders admin only permission privilege escalation7.6 Highspacewalk-client-toolsSUSEAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 Mediumspacewalk-client-toolsSUSEStack Buffer Overflow in Woodstox6.5 Mediumspacewalk-client-toolsSUSEgolang.org/x/net/http2 Denial of Service vulnerability7.5 Highspacewalk-client-toolsSUSEGrafana account takeover via OAuth vulnerability7.1 Highspacewalk-client-toolsSUSEStored XSS in Grafana's Unified Alerting7.3 Highspacewalk-client-toolsSUSEInefficient Regular Expression Complexity in moment7.5 Highspacewalk-client-toolsSUSESUMA user enumeration via weak error message5.3 Mediumspacewalk-client-toolsSUSEXML External Entity Reference in drools9.8 Criticalspacewalk-client-toolsSUSEGrafana Enterprise datasource network restrictions bypass via HTTP redirects6.6 Mediumspacewalk-client-toolsSUSEPrototype Pollution in async7.8 Highspacewalk-client-toolsSUSEImproper Authorization in cobbler/cobbler8.2 Highspacewalk-client-toolsSUSEUncontrolled Resource Consumption in promhttp7.5 Highspacewalk-client-toolsSUSEExposure of Sensitive Information in Grafana4.3 Mediumspacewalk-client-toolsSUSECross Site Request Forgery in Grafana6.3 Medium- Show moreLoading…