spacewalk-search vulnerabilities (SUSE)
26 vulnerabilities.
spacewalk-searchSUSEJWT token compromise can allow malicious actions including Remote Code Execution (RCE)9.4 Criticalspacewalk-searchSUSEDrools: unsafe data deserialization in streamutils8.1 Highspacewalk-searchSUSEStack Buffer Overflow in Woodstox6.5 Mediumspacewalk-searchSUSEInefficient Regular Expression Complexity in moment7.5 Highspacewalk-searchSUSESUMA user enumeration via weak error message5.3 Mediumspacewalk-searchSUSEXML External Entity Reference in drools9.8 Criticalspacewalk-searchSUSEPrototype Pollution in async7.8 Highspacewalk-searchSUSEImproper Authorization in cobbler/cobbler8.2 Highspacewalk-searchSUSEImproper Neutralization of Special Elements used in a Command in Shell-quote9.8 Criticalspacewalk-searchSUSESQL injection in hibernate-core7.4 Highspacewalk-searchSUSESaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi9.8 Criticalspacewalk-searchSUSESaltStack Salt Allows creating certificates with weak file permissions5.5 Mediumspacewalk-searchSUSESaltStack Salt Command Injection in netapi ssh client9.8 Criticalspacewalk-searchSUSEFile size limit bypass in node-fetch2.6 Lowspacewalk-searchSUSEImproper Restriction of XML External Entity Reference7.7 Highspacewalk-searchSUSEA flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity...8.6 Highspacewalk-searchSUSEAffected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)4.2 Mediumspacewalk-searchSUSEHigh severity vulnerability that affects org.apache.tika:tika-core7.5 Highspacewalk-searchSUSESpacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially...7.5 Highspacewalk-searchSUSECVE-2017-5754 does not affect BellSoft software5.6 Mediumspacewalk-searchSUSECVE-2017-5753 does not affect BellSoft software5.6 Mediumspacewalk-searchSUSEImportant: kernel security, bug fix, and enhancement update5.6 Mediumspacewalk-searchSUSESaltStack Salt Denial of Service via a crafted authentication request7.5 Highspacewalk-searchSUSESaltStack Salt Directory traversal vulnerability in minion id validation9.8 Criticalspacewalk-searchSUSEA cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite...3.5 Lowspacewalk-searchSUSEJabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even...9.8 Critical