spacewalk-utils vulnerabilities (SUSE)
64 vulnerabilities.
-
spacewalk-utilsSUSE SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint 9.3 Critical -
spacewalk-utilsSUSE Multi Linux Manager epxoses the plain text HTTP Proxy user:password in logs 6.9 Medium -
spacewalk-utilsSUSE Reflected XSS in spacewalk-java 5.6 Medium -
spacewalk-utilsSUSE Reflected XSS in SystemsController.java in spacewalk-java 5.6 Medium -
spacewalk-utilsSUSE Reflected XSS in Setup Wizard, Organization Credentials in spacewalk-web 4.6 Medium -
spacewalk-utilsSUSE Reflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web 4.6 Medium -
spacewalk-utilsSUSE Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes 9.8 Critical -
spacewalk-utilsSUSE Insecure handling SSH key in SUSE Manager when bootstrapping new clients 6.4 Medium -
spacewalk-utilsSUSE jose4j uses weak cryptographic algorithm 7.5 High -
spacewalk-utilsSUSE Large RSA keys can cause high CPU usage in crypto/tls 5.3 Medium -
spacewalk-utilsSUSE JWT token compromise can allow malicious actions including Remote Code Execution (RCE) 9.4 Critical -
spacewalk-utilsSUSE Drools: unsafe data deserialization in streamutils 8.1 High -
spacewalk-utilsSUSE SUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do 2.6 Low -
spacewalk-utilsSUSE SUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload 4.3 Medium -
spacewalk-utilsSUSE SUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction 4.3 Medium -
spacewalk-utilsSUSE SUMA user enumeration via weak error message 5.3 Medium -
spacewalk-utilsSUSE SUMA unauthenticated remote DoS via resource exhaustion 7.5 High -
spacewalk-utilsSUSE XML External Entity Reference in drools 9.8 Critical -
spacewalk-utilsSUSE Prototype Pollution in minimist 9.8 Critical -
spacewalk-utilsSUSE Improper Authorization in cobbler/cobbler 8.2 High -
spacewalk-utilsSUSE pgjdbc Arbitrary File Write Vulnerability 9.8 Critical -
spacewalk-utilsSUSE Uncontrolled Resource Consumption in promhttp 7.5 High -
spacewalk-utilsSUSE Unchecked Class Instantiation when providing Plugin Classes 7.0 High -
spacewalk-utilsSUSE Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config... 8.8 High -
spacewalk-utilsSUSE Cobbler before 3.3.0 allows authorization bypass for modification of settings. 7.5 High -
spacewalk-utilsSUSE Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data. 7.5 High -
spacewalk-utilsSUSE Cobbler before 3.3.0 allows log poisoning 9.8 Critical -
spacewalk-utilsSUSE Exposure of Resource to Wrong Sphere in salt 7.5 High -
spacewalk-utilsSUSE Command Injection in SaltStack Salt 7.8 High -
spacewalk-utilsSUSE Infinite loop in Apache Tika's MP3 parser 5.5 Medium -
spacewalk-utilsSUSE An XML external entity (XXE) injection vulnerability exists in the Nutch DmozParser 9.1 Critical -
spacewalk-utilsSUSE Prototype Pollution 7.5 High -
spacewalk-utilsSUSE Server-Side Forgery Request can be activated unmarshalling with XStream 6.3 Medium -
spacewalk-utilsSUSE XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling 6.8 Medium -
spacewalk-utilsSUSE SQL injection in hibernate-core 7.4 High -
spacewalk-utilsSUSE Remote Code Execution in XStream 8.0 High -
spacewalk-utilsSUSE salt-api is accessible to every user on SUSE Manager Server 9.3 Critical -
spacewalk-utilsSUSE SQL Injection in Hibernate ORM 6.5 Medium -
spacewalk-utilsSUSE jQuery has a potential XSS vulnerability 6.9 Medium -
spacewalk-utilsSUSE Prototype Pollution in minimist 5.6 Medium -
spacewalk-utilsSUSE A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity... 8.6 High -
spacewalk-utilsSUSE Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS) 4.2 Medium -
spacewalk-utilsSUSE Allocation of Resources Without Limits or Throttling in Apache Tika 8.8 High -
spacewalk-utilsSUSE Allocation of Resources Without Limits or Throttling in Apache Tika 7.8 High -
spacewalk-utilsSUSE Allocation of Resources Without Limits or Throttling in Apache Tika 6.5 Medium -
spacewalk-utilsSUSE Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser 6.5 Medium -
spacewalk-utilsSUSE PowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4... 5.3 Medium -
spacewalk-utilsSUSE PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor... 5.3 Medium -
spacewalk-utilsSUSE High severity vulnerability that affects org.apache.tika:tika-core 7.5 High -
spacewalk-utilsSUSE Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially... 7.5 High - Show olderLoading…