supportutils-plugin-susemanager-client vulnerabilities (SUSE)
118 vulnerabilities.
-
supportutils-plugin-susemanager-clientSUSE Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html 6.1 Medium -
supportutils-plugin-susemanager-clientSUSE Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html 6.1 Medium -
supportutils-plugin-susemanager-clientSUSE Invoking duplicate attributes can cause XSS in golang.org/x/net/html 6.1 Medium -
supportutils-plugin-susemanager-clientSUSE Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html 6.1 Medium -
supportutils-plugin-susemanager-clientSUSE Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html 6.5 Medium -
supportutils-plugin-susemanager-clientSUSE IDOR in Annotations API allows unprivileged users to DELETE annotation 4.3 Medium -
supportutils-plugin-susemanager-clientSUSE Grafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macro 6.5 Medium -
supportutils-plugin-susemanager-clientSUSE Grafana plugin resources can lead to unbounded memory allocation 6.5 Medium -
supportutils-plugin-susemanager-clientSUSE Auth Proxy IPv6 whitelist bypass 7.4 High -
supportutils-plugin-susemanager-clientSUSE SQL Expressions Read File From Disk 6.3 Medium -
supportutils-plugin-susemanager-clientSUSE BAC in Snapshot API allows deletion of unauthorized dashboard snapshots 6.5 Medium -
supportutils-plugin-susemanager-clientSUSE Users can generate Service Account tokens after permissions removal 5.9 Medium -
supportutils-plugin-susemanager-clientSUSE Dashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard Admin 7.1 High -
supportutils-plugin-susemanager-clientSUSE Grafana Live push endpoint allows unbounded memory allocation leading to OOM 6.5 Medium -
supportutils-plugin-susemanager-clientSUSE Viewer-triggered race condition in Grafana Live leads to complete server crash 6.5 Medium -
supportutils-plugin-susemanager-clientSUSE Prometheus: remote read endpoint allows denial of service via crafted snappy payload 7.5 High -
supportutils-plugin-susemanager-clientSUSE Prometheus Azure AD remote write OAuth client secret exposed via config API 7.5 High -
supportutils-plugin-susemanager-clientSUSE Apache Thrift: Go TFramedTransport uint32 overflow 7.5 High -
supportutils-plugin-susemanager-clientSUSE Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer 5.3 Medium -
supportutils-plugin-susemanager-clientSUSE Go JOSE affect by a panic in JWE decryption 7.5 High -
supportutils-plugin-susemanager-clientSUSE Rollup 4 has Arbitrary File Write via Path Traversal 8.8 High -
supportutils-plugin-susemanager-clientSUSE Public Dashboards time range restriction on annotations can be bypassed 5.3 Medium -
supportutils-plugin-susemanager-clientSUSE jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions 9.2 Critical -
supportutils-plugin-susemanager-clientSUSE Uncontrolled Resource Consumption in @isaacs/brace-expansion 9.2 Critical -
supportutils-plugin-susemanager-clientSUSE JSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js 9.8 Critical -
supportutils-plugin-susemanager-clientSUSE Expr has Denial of Service via Unbounded Recursion in Builtin Functions 7.5 High -
supportutils-plugin-susemanager-clientSUSE Tornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters 7.5 High -
supportutils-plugin-susemanager-clientSUSE Tornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing 7.5 High -
supportutils-plugin-susemanager-clientSUSE Tornado vulnerable to Header Injection and XSS via reason argument 5.4 Medium -
supportutils-plugin-susemanager-clientSUSE Salt Master authentication protocol downgrade may enable minion impersonation 7.5 High -
supportutils-plugin-susemanager-clientSUSE Salt junos module uses an unsafe YAML loader which may allow unintended code execution 7.3 High -
supportutils-plugin-susemanager-clientSUSE CVE-2025-12816 8.6 High -
supportutils-plugin-susemanager-clientSUSE Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure 5.3 Medium -
supportutils-plugin-susemanager-clientSUSE SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint 9.3 Critical -
supportutils-plugin-susemanager-clientSUSE Multi Linux Manager epxoses the plain text HTTP Proxy user:password in logs 6.9 Medium -
supportutils-plugin-susemanager-clientSUSE An open redirect vulnerability has been identified in Grafana OSS organization switching... 4.2 Medium -
supportutils-plugin-susemanager-clientSUSE Grafana is vulnerable to XSS attacks through open redirects and path traversal 7.6 High -
supportutils-plugin-susemanager-clientSUSE Grafana's insecure DingDing Alert integration exposes sensitive information 4.3 Medium -
supportutils-plugin-susemanager-clientSUSE Reflected XSS in spacewalk-java 5.6 Medium -
supportutils-plugin-susemanager-clientSUSE Reflected XSS in SystemsController.java in spacewalk-java 5.6 Medium -
supportutils-plugin-susemanager-clientSUSE Security update for SUSE Manager Client Tools No score -
supportutils-plugin-susemanager-clientSUSE Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto 9.1 Critical -
supportutils-plugin-susemanager-clientSUSE Database password leaked by systemd uyuni-server-attestation service 5.7 Medium -
supportutils-plugin-susemanager-clientSUSE Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 3.1 Low -
supportutils-plugin-susemanager-clientSUSE Grafana alerting wrong permission on datasource rule write endpoint 5.1 Medium -
supportutils-plugin-susemanager-clientSUSE Denial of service via malicious preflight requests in github.com/rs/cors 7.5 High -
supportutils-plugin-susemanager-clientSUSE Email Validation Bypass And Preventing Sign Up From Email's Owner 5.4 Medium -
supportutils-plugin-susemanager-clientSUSE Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration 5.0 Medium -
supportutils-plugin-susemanager-clientSUSE Ansible: template injection 7.1 High -
supportutils-plugin-susemanager-clientSUSE Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint 7.5 High - Show olderLoading…