suse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-image vulnerabilities (SUSE)
19 vulnerabilities.
suse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imageSUSEIDOR in Annotations API allows unprivileged users to DELETE annotation4.3 Mediumsuse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imageSUSEGrafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macro6.5 Mediumsuse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imageSUSEGrafana plugin resources can lead to unbounded memory allocation6.5 Mediumsuse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imageSUSEAuth Proxy IPv6 whitelist bypass7.4 Highsuse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imageSUSESQL Expressions Read File From Disk6.3 Mediumsuse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imageSUSEBAC in Snapshot API allows deletion of unauthorized dashboard snapshots6.5 Mediumsuse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imageSUSEUsers can generate Service Account tokens after permissions removal5.9 Mediumsuse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imageSUSEDashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard Admin7.1 Highsuse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imageSUSEGrafana Live push endpoint allows unbounded memory allocation leading to OOM6.5 Mediumsuse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imageSUSEViewer-triggered race condition in Grafana Live leads to complete server crash6.5 Mediumsuse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imageSUSEPrometheus: remote read endpoint allows denial of service via crafted snappy payload7.5 Highsuse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imageSUSEPrometheus Azure AD remote write OAuth client secret exposed via config API7.5 Highsuse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imageSUSEpgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS7.5 Highsuse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imageSUSEApache Thrift: Go TFramedTransport uint32 overflow7.5 Highsuse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imageSUSEPrometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer5.3 Mediumsuse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imageSUSEGo JOSE affect by a panic in JWE decryption7.5 Highsuse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imageSUSEApache Commons OGNL: Expression Injection leading to RCE8.8 Highsuse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imageSUSEUncontrolled Resource Consumption in promhttp7.5 Highsuse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-imageSUSEInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical