susemanager-build-keys vulnerabilities (SUSE)
28 vulnerabilities.
-
susemanager-build-keysSUSE spacewalk-java has various XSS issues on search page 9.3 Critical -
susemanager-build-keysSUSE SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint 9.3 Critical -
susemanager-build-keysSUSE Multi Linux Manager epxoses the plain text HTTP Proxy user:password in logs 6.9 Medium -
susemanager-build-keysSUSE Reflected XSS in spacewalk-java 5.6 Medium -
susemanager-build-keysSUSE Reflected XSS in SystemsController.java in spacewalk-java 5.6 Medium -
susemanager-build-keysSUSE Reflected XSS in Setup Wizard, Organization Credentials in spacewalk-web 4.6 Medium -
susemanager-build-keysSUSE Reflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web 4.6 Medium -
susemanager-build-keysSUSE Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes 9.8 Critical -
susemanager-build-keysSUSE Insecure handling SSH key in SUSE Manager when bootstrapping new clients 6.4 Medium -
susemanager-build-keysSUSE jose4j uses weak cryptographic algorithm 7.5 High -
susemanager-build-keysSUSE JWT token compromise can allow malicious actions including Remote Code Execution (RCE) 9.4 Critical -
susemanager-build-keysSUSE Drools: unsafe data deserialization in streamutils 8.1 High -
susemanager-build-keysSUSE Stack Buffer Overflow in Woodstox 6.5 Medium -
susemanager-build-keysSUSE Inefficient Regular Expression Complexity in moment 7.5 High -
susemanager-build-keysSUSE SUMA user enumeration via weak error message 5.3 Medium -
susemanager-build-keysSUSE XML External Entity Reference in drools 9.8 Critical -
susemanager-build-keysSUSE Improper Authorization in cobbler/cobbler 8.2 High -
susemanager-build-keysSUSE Improper Neutralization of Special Elements used in a Command in Shell-quote 9.8 Critical -
susemanager-build-keysSUSE Cobbler before 3.3.0 allows authorization bypass for modification of settings. 7.5 High -
susemanager-build-keysSUSE Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data. 7.5 High -
susemanager-build-keysSUSE Cobbler before 3.3.0 allows log poisoning 9.8 Critical -
susemanager-build-keysSUSE Command Injection in SaltStack Salt 7.8 High -
susemanager-build-keysSUSE Infinite loop in Apache Tika's MP3 parser 5.5 Medium -
susemanager-build-keysSUSE SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi 9.8 Critical -
susemanager-build-keysSUSE SaltStack Salt Allows creating certificates with weak file permissions 5.5 Medium -
susemanager-build-keysSUSE SaltStack Salt Command Injection in netapi ssh client 9.8 Critical -
susemanager-build-keysSUSE File size limit bypass in node-fetch 2.6 Low -
susemanager-build-keysSUSE SQL Injection in Hibernate ORM 6.5 Medium