spacewalk-web vulnerabilities (SUSE)
81 vulnerabilities.
spacewalk-webSUSEImproper Restriction of XML External Entity Reference7.7 Highspacewalk-webSUSEjQuery has a potential XSS vulnerability6.9 Mediumspacewalk-webSUSEPrototype Pollution in minimist5.6 Mediumspacewalk-webSUSEA flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity...8.6 Highspacewalk-webSUSEAffected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)4.2 Mediumspacewalk-webSUSEAllocation of Resources Without Limits or Throttling in Apache Tika8.8 Highspacewalk-webSUSEAllocation of Resources Without Limits or Throttling in Apache Tika7.8 Highspacewalk-webSUSEAllocation of Resources Without Limits or Throttling in Apache Tika6.5 Mediumspacewalk-webSUSEIt was found that Spacewalk, all versions through 2.8, did not safely compute client token...4.3 Mediumspacewalk-webSUSEA path traversal flaw was found in spacewalk-proxy, all versions through 2.8, in the way the...8.1 Highspacewalk-webSUSEsusemanager installer creates world-readable swap files4.0 Mediumspacewalk-webSUSEBillion laughs attack in c3p07.5 Highspacewalk-webSUSEApache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser6.5 Mediumspacewalk-webSUSEXML External Entity Reference in mchange:c3p09.8 Criticalspacewalk-webSUSEPowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4...5.3 Mediumspacewalk-webSUSEPowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor...5.3 Mediumspacewalk-webSUSEHigh severity vulnerability that affects org.apache.tika:tika-core7.5 Highspacewalk-webSUSEModerate severity vulnerability that affects org.postgresql:pgjdbc-aggregate8.1 Highspacewalk-webSUSESpacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially...7.5 Highspacewalk-webSUSECVE-2017-5754 does not affect BellSoft software5.6 Mediumspacewalk-webSUSECVE-2017-5753 does not affect BellSoft software5.6 Mediumspacewalk-webSUSEImportant: kernel security, bug fix, and enhancement update5.6 Mediumspacewalk-webSUSECobbler vulnerable to arbitrary code execution9.8 Criticalspacewalk-webSUSEA cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red...4.3 Mediumspacewalk-webSUSESaltStack Salt Denial of Service via a crafted authentication request7.5 Highspacewalk-webSUSESaltStack Salt Directory traversal vulnerability in minion id validation9.8 Criticalspacewalk-webSUSEA cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite...3.5 Lowspacewalk-webSUSEJabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even...9.8 Criticalspacewalk-webSUSEIt was found that spacewalk-channel can be used by a non-admin user or disabled users to perform...6.5 Mediumspacewalk-webSUSEDenial of service in XStream7.5 Highspacewalk-webSUSEImproper Neutralization of Input During Web Page Generation in Direct Web Remoting4.3 Medium