spacewalk-koan vulnerabilities (SUSE)
38 vulnerabilities.
spacewalk-koanSUSEUsers outside an organization can delete a snapshot with its key6.5 Mediumspacewalk-koanSUSEEmail Validation Bypass And Preventing Sign Up From Email's Owner5.4 Mediumspacewalk-koanSUSEAnsible-core: possible information leak in tasks that ignore ansible_no_log configuration5.0 Mediumspacewalk-koanSUSEAnsible: template injection7.1 Highspacewalk-koanSUSEUncontrolled Resource Consumption in promhttp7.5 Highspacewalk-koanSUSEExposure of Sensitive Information in Grafana4.3 Mediumspacewalk-koanSUSECross Site Request Forgery in Grafana6.3 Mediumspacewalk-koanSUSECross site scripting in Grafana proxy6.5 Mediumspacewalk-koanSUSEOAuth Identity Token exposure in Grafana4.3 Mediumspacewalk-koanSUSEGrafana directory traversal for `.cvs` files4.3 Mediumspacewalk-koanSUSEDirectory Traversal in Grafana4.3 Mediumspacewalk-koanSUSEGrafana path traversal7.5 Highspacewalk-koanSUSECross organization admin control in Grafana9.1 Criticalspacewalk-koanSUSEXSS vulnerability allowing arbitrary JavaScript execution6.9 Mediumspacewalk-koanSUSESnapshot authentication bypass in grafana9.8 Criticalspacewalk-koanSUSESM2 Decryption Buffer Overflow9.8 Criticalspacewalk-koanSUSEec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.5 Highspacewalk-koanSUSEArbitrary redirects under /new endpoint6.5 Mediumspacewalk-koanSUSECommand Injection in SaltStack Salt7.8 Highspacewalk-koanSUSEOne of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7...7.5 Highspacewalk-koanSUSEThe team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x...6.5 Mediumspacewalk-koanSUSEThe team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control...6.5 Mediumspacewalk-koanSUSEGrafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor...7.1 Highspacewalk-koanSUSEInsertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible5.5 Mediumspacewalk-koanSUSEImproper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible5.0 Mediumspacewalk-koanSUSEImproper Verification of Cryptographic Signature in ansible7.1 Highspacewalk-koanSUSEServer Side Request Forgery in Grafana8.2 Highspacewalk-koanSUSEExposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible5.0 Mediumspacewalk-koanSUSEGrafana XSS in header column rename6.1 Mediumspacewalk-koanSUSEInsertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible5.0 Mediumspacewalk-koanSUSECross-site Scripting in Bootstrap-3-Typeahead6.1 Mediumspacewalk-koanSUSEIn Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This...7.5 Highspacewalk-koanSUSEAnsible Improper Input Validation vulnerability7.8 Highspacewalk-koanSUSEAnsible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems6.6 Mediumspacewalk-koanSUSEAnsible fails to properly sanitize fact variables sent from the Ansible controller7.6 Highspacewalk-koanSUSEAnsible Insertion of Sensitive Information into Log File vulnerability9.8 Criticalspacewalk-koanSUSEImproper Input Validation in ansible2.2 Lowspacewalk-koanSUSEAnsible apt_key module does not properly verify key fingerprint6.3 Medium