susemanager-doc-indexes vulnerabilities (SUSE)
49 vulnerabilities.
susemanager-doc-indexesSUSELarge RSA keys can cause high CPU usage in crypto/tls5.3 Mediumsusemanager-doc-indexesSUSEJWT token compromise can allow malicious actions including Remote Code Execution (RCE)9.4 Criticalsusemanager-doc-indexesSUSEDrools: unsafe data deserialization in streamutils8.1 Highsusemanager-doc-indexesSUSESUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do2.6 Lowsusemanager-doc-indexesSUSESUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload4.3 Mediumsusemanager-doc-indexesSUSESUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction4.3 Mediumsusemanager-doc-indexesSUSEStack Buffer Overflow in Woodstox6.5 Mediumsusemanager-doc-indexesSUSEInefficient Regular Expression Complexity in moment7.5 Highsusemanager-doc-indexesSUSESUMA user enumeration via weak error message5.3 Mediumsusemanager-doc-indexesSUSESUMA unauthenticated remote DoS via resource exhaustion7.5 Highsusemanager-doc-indexesSUSEXML External Entity Reference in drools9.8 Criticalsusemanager-doc-indexesSUSEPrototype Pollution in async7.8 Highsusemanager-doc-indexesSUSEPrototype Pollution in minimist9.8 Criticalsusemanager-doc-indexesSUSEImproper Authorization in cobbler/cobbler8.2 Highsusemanager-doc-indexesSUSEpgjdbc Arbitrary File Write Vulnerability9.8 Criticalsusemanager-doc-indexesSUSEUncontrolled Resource Consumption in promhttp7.5 Highsusemanager-doc-indexesSUSEUnchecked Class Instantiation when providing Plugin Classes7.0 Highsusemanager-doc-indexesSUSESpacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config...8.8 Highsusemanager-doc-indexesSUSEImproper Neutralization of Special Elements used in a Command in Shell-quote9.8 Criticalsusemanager-doc-indexesSUSECobbler before 3.3.0 allows authorization bypass for modification of settings.7.5 Highsusemanager-doc-indexesSUSECobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.7.5 Highsusemanager-doc-indexesSUSECobbler before 3.3.0 allows log poisoning9.8 Criticalsusemanager-doc-indexesSUSEExposure of Resource to Wrong Sphere in salt7.5 Highsusemanager-doc-indexesSUSECommand Injection in SaltStack Salt7.8 Highsusemanager-doc-indexesSUSEInfinite loop in Apache Tika's MP3 parser5.5 Mediumsusemanager-doc-indexesSUSEAn XML external entity (XXE) injection vulnerability exists in the Nutch DmozParser9.1 Criticalsusemanager-doc-indexesSUSEPrototype Pollution7.5 Highsusemanager-doc-indexesSUSEServer-Side Forgery Request can be activated unmarshalling with XStream6.3 Mediumsusemanager-doc-indexesSUSEXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling6.8 Mediumsusemanager-doc-indexesSUSESQL injection in hibernate-core7.4 Highsusemanager-doc-indexesSUSERemote Code Execution in XStream8.0 Highsusemanager-doc-indexesSUSESaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi9.8 Criticalsusemanager-doc-indexesSUSESaltStack Salt Allows creating certificates with weak file permissions5.5 Mediumsusemanager-doc-indexesSUSESaltStack Salt Command Injection in netapi ssh client9.8 Criticalsusemanager-doc-indexesSUSEFile size limit bypass in node-fetch2.6 Lowsusemanager-doc-indexesSUSESQL Injection in Hibernate ORM6.5 Mediumsusemanager-doc-indexesSUSEImproper Restriction of XML External Entity Reference7.7 Highsusemanager-doc-indexesSUSEjQuery has a potential XSS vulnerability6.9 Mediumsusemanager-doc-indexesSUSEPrototype Pollution in minimist5.6 Mediumsusemanager-doc-indexesSUSEA flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity...8.6 Highsusemanager-doc-indexesSUSEAffected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)4.2 Mediumsusemanager-doc-indexesSUSEAllocation of Resources Without Limits or Throttling in Apache Tika8.8 Highsusemanager-doc-indexesSUSEAllocation of Resources Without Limits or Throttling in Apache Tika7.8 Highsusemanager-doc-indexesSUSEAllocation of Resources Without Limits or Throttling in Apache Tika6.5 Mediumsusemanager-doc-indexesSUSEIt was found that Spacewalk, all versions through 2.8, did not safely compute client token...4.3 Mediumsusemanager-doc-indexesSUSEA path traversal flaw was found in spacewalk-proxy, all versions through 2.8, in the way the...8.1 Highsusemanager-doc-indexesSUSEBillion laughs attack in c3p07.5 Highsusemanager-doc-indexesSUSEXML External Entity Reference in mchange:c3p09.8 Criticalsusemanager-doc-indexesSUSESpacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially...7.5 High