susemanager-sync-data vulnerabilities (SUSE)
58 vulnerabilities.
-
susemanager-sync-dataSUSE SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint 9.3 Critical -
susemanager-sync-dataSUSE Multi Linux Manager epxoses the plain text HTTP Proxy user:password in logs 6.9 Medium -
susemanager-sync-dataSUSE Reflected XSS in spacewalk-java 5.6 Medium -
susemanager-sync-dataSUSE Reflected XSS in SystemsController.java in spacewalk-java 5.6 Medium -
susemanager-sync-dataSUSE Reflected XSS in Setup Wizard, Organization Credentials in spacewalk-web 4.6 Medium -
susemanager-sync-dataSUSE Reflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web 4.6 Medium -
susemanager-sync-dataSUSE Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes 9.8 Critical -
susemanager-sync-dataSUSE Insecure handling SSH key in SUSE Manager when bootstrapping new clients 6.4 Medium -
susemanager-sync-dataSUSE jose4j denial of service via specifically crafted JWE 6.5 Medium -
susemanager-sync-dataSUSE jose4j uses weak cryptographic algorithm 7.5 High -
susemanager-sync-dataSUSE Denial of Service attack on windows app using Netty 5.5 Medium -
susemanager-sync-dataSUSE Drools: unsafe data deserialization in streamutils 8.1 High -
susemanager-sync-dataSUSE Security update for SUSE Manager Server 4.2 No score -
susemanager-sync-dataSUSE SUMA user enumeration via weak error message 5.3 Medium -
susemanager-sync-dataSUSE SUMA unauthenticated remote DoS via resource exhaustion 7.5 High -
susemanager-sync-dataSUSE XML External Entity Reference in drools 9.8 Critical -
susemanager-sync-dataSUSE Prototype Pollution in minimist 9.8 Critical -
susemanager-sync-dataSUSE Improper Authorization in cobbler/cobbler 8.2 High -
susemanager-sync-dataSUSE Security update for SUSE Manager Server 4.2 No score -
susemanager-sync-dataSUSE Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config... 8.8 High -
susemanager-sync-dataSUSE Cobbler before 3.3.0 allows authorization bypass for modification of settings. 7.5 High -
susemanager-sync-dataSUSE Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data. 7.5 High -
susemanager-sync-dataSUSE Cobbler before 3.3.0 allows log poisoning 9.8 Critical -
susemanager-sync-dataSUSE Exposure of Resource to Wrong Sphere in salt 7.5 High -
susemanager-sync-dataSUSE Command Injection in SaltStack Salt 7.8 High -
susemanager-sync-dataSUSE Infinite loop in Apache Tika's MP3 parser 5.5 Medium -
susemanager-sync-dataSUSE An XML external entity (XXE) injection vulnerability exists in the Nutch DmozParser 9.1 Critical -
susemanager-sync-dataSUSE salt-api is accessible to every user on SUSE Manager Server 9.3 Critical -
susemanager-sync-dataSUSE SQL Injection in Hibernate ORM 6.5 Medium -
susemanager-sync-dataSUSE Improper Restriction of XML External Entity Reference 7.7 High -
susemanager-sync-dataSUSE jQuery has a potential XSS vulnerability 6.9 Medium -
susemanager-sync-dataSUSE A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity... 8.6 High -
susemanager-sync-dataSUSE Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS) 4.2 Medium -
susemanager-sync-dataSUSE Allocation of Resources Without Limits or Throttling in Apache Tika 8.8 High -
susemanager-sync-dataSUSE Allocation of Resources Without Limits or Throttling in Apache Tika 7.8 High -
susemanager-sync-dataSUSE Allocation of Resources Without Limits or Throttling in Apache Tika 6.5 Medium -
susemanager-sync-dataSUSE It was found that Spacewalk, all versions through 2.8, did not safely compute client token... 4.3 Medium -
susemanager-sync-dataSUSE A path traversal flaw was found in spacewalk-proxy, all versions through 2.8, in the way the... 8.1 High -
susemanager-sync-dataSUSE susemanager installer creates world-readable swap files 4.0 Medium -
susemanager-sync-dataSUSE Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser 6.5 Medium -
susemanager-sync-dataSUSE High severity vulnerability that affects org.apache.tika:tika-core 7.5 High -
susemanager-sync-dataSUSE Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially... 7.5 High -
susemanager-sync-dataSUSE CVE-2017-5754 does not affect BellSoft software 5.6 Medium -
susemanager-sync-dataSUSE CVE-2017-5753 does not affect BellSoft software 5.6 Medium -
susemanager-sync-dataSUSE Important: kernel security, bug fix, and enhancement update 5.6 Medium -
susemanager-sync-dataSUSE Cobbler vulnerable to arbitrary code execution 9.8 Critical -
susemanager-sync-dataSUSE SaltStack Salt Denial of Service via a crafted authentication request 7.5 High -
susemanager-sync-dataSUSE SaltStack Salt Directory traversal vulnerability in minion id validation 9.8 Critical -
susemanager-sync-dataSUSE A cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite... 3.5 Low -
susemanager-sync-dataSUSE JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even... 9.8 Critical - Show olderLoading…