spacewalk-remote-utils vulnerabilities (SUSE)

19 vulnerabilities.

• spacewalk-remote-utils SUSE Uncontrolled Resource Consumption in promhttp CVE-2022-21698 Fix available 7.5 HighFebruary 15, 2022
• spacewalk-remote-utils SUSE Exposure of Sensitive Information in Grafana CVE-2022-21713 Fix available 4.3 MediumFebruary 8, 2022
• spacewalk-remote-utils SUSE Cross Site Request Forgery in Grafana CVE-2022-21703 Fix available 6.3 MediumFebruary 8, 2022
• spacewalk-remote-utils SUSE Cross site scripting in Grafana proxy CVE-2022-21702 Fix available 6.5 MediumFebruary 8, 2022
• spacewalk-remote-utils SUSE OAuth Identity Token exposure in Grafana CVE-2022-21673 Fix available 4.3 MediumJanuary 18, 2022
• spacewalk-remote-utils SUSE Grafana directory traversal for `.cvs` files CVE-2021-43815 Fix available 4.3 MediumDecember 10, 2021
• spacewalk-remote-utils SUSE Directory Traversal in Grafana CVE-2021-43813 Fix available EPSS 56.6% 4.3 MediumDecember 10, 2021
• spacewalk-remote-utils SUSE Grafana path traversal CVE-2021-43798 In KEVPublic exploitFix available EPSS 88.5% 7.5 HighDecember 7, 2021
• spacewalk-remote-utils SUSE Cross organization admin control in Grafana CVE-2021-41244 Fix available 9.1 CriticalNovember 15, 2021
• spacewalk-remote-utils SUSE XSS vulnerability allowing arbitrary JavaScript execution CVE-2021-41174 Fix available EPSS 85.4% 6.9 MediumNovember 3, 2021
• spacewalk-remote-utils SUSE Snapshot authentication bypass in grafana CVE-2021-39226 In KEVFix available EPSS 99.9% 9.8 CriticalOctober 5, 2021
• spacewalk-remote-utils SUSE SM2 Decryption Buffer Overflow CVE-2021-3711 Public exploitFix available EPSS 87.8% 9.8 CriticalAugust 24, 2021
• spacewalk-remote-utils SUSE ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka... CVE-2021-36222 Fix available EPSS 10.5% 7.5 HighJuly 22, 2021
• spacewalk-remote-utils SUSE Command Injection in SaltStack Salt CVE-2021-31607 Fix available 7.8 HighApril 23, 2021
• spacewalk-remote-utils SUSE Server Side Request Forgery in Grafana CVE-2020-13379 Public exploitFix available EPSS 99.9% 8.2 HighJune 3, 2020
• spacewalk-remote-utils SUSE Grafana XSS in header column rename CVE-2020-12245 Fix available 6.1 MediumApril 24, 2020
• spacewalk-remote-utils SUSE Cross-site Scripting in Bootstrap-3-Typeahead CVE-2019-10215 Fix available 6.1 MediumOctober 8, 2019
• spacewalk-remote-utils SUSE In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This... CVE-2019-15043 Public exploitFix available EPSS 63.4% 7.5 HighSeptember 3, 2019
• spacewalk-remote-utils SUSE It was found that Spacewalk, all versions through 2.8, did not safely compute client token... CVE-2019-10136 Fix available 4.3 MediumJuly 2, 2019