subscription-matcher vulnerabilities (SUSE)
36 vulnerabilities.
-
subscription-matcherSUSE SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint 9.3 Critical -
subscription-matcherSUSE Multi Linux Manager epxoses the plain text HTTP Proxy user:password in logs 6.9 Medium -
subscription-matcherSUSE Reflected XSS in spacewalk-java 5.6 Medium -
subscription-matcherSUSE Reflected XSS in SystemsController.java in spacewalk-java 5.6 Medium -
subscription-matcherSUSE Insecure handling SSH key in SUSE Manager when bootstrapping new clients 6.4 Medium -
subscription-matcherSUSE jose4j denial of service via specifically crafted JWE 6.5 Medium -
subscription-matcherSUSE jose4j uses weak cryptographic algorithm 7.5 High -
subscription-matcherSUSE Inefficient Regular Expression Complexity in moment 7.5 High -
subscription-matcherSUSE SUMA user enumeration via weak error message 5.3 Medium -
subscription-matcherSUSE SUMA unauthenticated remote DoS via resource exhaustion 7.5 High -
subscription-matcherSUSE XML External Entity Reference in drools 9.8 Critical -
subscription-matcherSUSE Prototype Pollution in async 7.8 High -
subscription-matcherSUSE Improper Authorization in cobbler/cobbler 8.2 High -
subscription-matcherSUSE pgjdbc Arbitrary File Write Vulnerability 9.8 Critical -
subscription-matcherSUSE Uncontrolled Resource Consumption in promhttp 7.5 High -
subscription-matcherSUSE Unchecked Class Instantiation when providing Plugin Classes 7.0 High -
subscription-matcherSUSE Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config... 8.8 High -
subscription-matcherSUSE Improper Neutralization of Special Elements used in a Command in Shell-quote 9.8 Critical -
subscription-matcherSUSE Exposure of Resource to Wrong Sphere in salt 7.5 High -
subscription-matcherSUSE Prototype Pollution 7.5 High -
subscription-matcherSUSE Server-Side Forgery Request can be activated unmarshalling with XStream 6.3 Medium -
subscription-matcherSUSE XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling 6.8 Medium -
subscription-matcherSUSE Remote Code Execution in XStream 8.0 High -
subscription-matcherSUSE SQL Injection in Hibernate ORM 6.5 Medium -
subscription-matcherSUSE A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity... 8.6 High -
subscription-matcherSUSE Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS) 4.2 Medium -
subscription-matcherSUSE Billion laughs attack in c3p0 7.5 High -
subscription-matcherSUSE Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser 6.5 Medium -
subscription-matcherSUSE XML External Entity Reference in mchange:c3p0 9.8 Critical -
subscription-matcherSUSE PowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4... 5.3 Medium -
subscription-matcherSUSE PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor... 5.3 Medium -
subscription-matcherSUSE Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially... 7.5 High -
subscription-matcherSUSE SaltStack Salt Denial of Service via a crafted authentication request 7.5 High -
subscription-matcherSUSE SaltStack Salt Directory traversal vulnerability in minion id validation 9.8 Critical -
subscription-matcherSUSE It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform... 6.5 Medium -
subscription-matcherSUSE Denial of service in XStream 7.5 High