uyuni-common-libs vulnerabilities (SUSE)
130 vulnerabilities.
uyuni-common-libsSUSEInvoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html6.1 Mediumuyuni-common-libsSUSEInvoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html6.1 Mediumuyuni-common-libsSUSEInvoking duplicate attributes can cause XSS in golang.org/x/net/html6.1 Mediumuyuni-common-libsSUSEInvoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html6.1 Mediumuyuni-common-libsSUSEInvoking denial of service when parsing arbitrary HTML in golang.org/x/net/html6.5 Mediumuyuni-common-libsSUSEIDOR in Annotations API allows unprivileged users to DELETE annotation4.3 Mediumuyuni-common-libsSUSEGrafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macro6.5 Mediumuyuni-common-libsSUSEGrafana plugin resources can lead to unbounded memory allocation6.5 Mediumuyuni-common-libsSUSEAuth Proxy IPv6 whitelist bypass7.4 Highuyuni-common-libsSUSESQL Expressions Read File From Disk6.3 Mediumuyuni-common-libsSUSEBAC in Snapshot API allows deletion of unauthorized dashboard snapshots6.5 Mediumuyuni-common-libsSUSEUsers can generate Service Account tokens after permissions removal5.9 Mediumuyuni-common-libsSUSEDashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard Admin7.1 Highuyuni-common-libsSUSEGrafana Live push endpoint allows unbounded memory allocation leading to OOM6.5 Mediumuyuni-common-libsSUSEViewer-triggered race condition in Grafana Live leads to complete server crash6.5 Mediumuyuni-common-libsSUSEPrometheus: remote read endpoint allows denial of service via crafted snappy payload7.5 Highuyuni-common-libsSUSEPrometheus Azure AD remote write OAuth client secret exposed via config API7.5 Highuyuni-common-libsSUSEApache Thrift: Go TFramedTransport uint32 overflow7.5 Highuyuni-common-libsSUSEPrometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer5.3 Mediumuyuni-common-libsSUSEGo JOSE affect by a panic in JWE decryption7.5 Highuyuni-common-libsSUSERollup 4 has Arbitrary File Write via Path Traversal8.8 Highuyuni-common-libsSUSEPublic Dashboards time range restriction on annotations can be bypassed5.3 Mediumuyuni-common-libsSUSEjsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions9.2 Criticaluyuni-common-libsSUSEUncontrolled Resource Consumption in @isaacs/brace-expansion9.2 Criticaluyuni-common-libsSUSEJSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js9.8 Criticaluyuni-common-libsSUSEExpr has Denial of Service via Unbounded Recursion in Builtin Functions7.5 Highuyuni-common-libsSUSETornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters7.5 Highuyuni-common-libsSUSETornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing7.5 Highuyuni-common-libsSUSETornado vulnerable to Header Injection and XSS via reason argument5.4 Mediumuyuni-common-libsSUSESalt Master authentication protocol downgrade may enable minion impersonation7.5 Highuyuni-common-libsSUSESalt junos module uses an unsafe YAML loader which may allow unintended code execution7.3 Highuyuni-common-libsSUSECVE-2025-128168.6 Highuyuni-common-libsSUSEGrafana's insecure DingDing Alert integration exposes sensitive information4.3 Mediumuyuni-common-libsSUSEHTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net4.4 Mediumuyuni-common-libsSUSEReflected XSS in Setup Wizard, Organization Credentials in spacewalk-web4.6 Mediumuyuni-common-libsSUSEReflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web4.6 Mediumuyuni-common-libsSUSECobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes9.8 Criticaluyuni-common-libsSUSEHTTP/2 CONTINUATION flood in net/http7.5 Highuyuni-common-libsSUSEUsers outside an organization can delete a snapshot with its key6.5 Mediumuyuni-common-libsSUSEEmail Validation Bypass And Preventing Sign Up From Email's Owner5.4 Mediumuyuni-common-libsSUSEAnsible-core: possible information leak in tasks that ignore ansible_no_log configuration5.0 Mediumuyuni-common-libsSUSEjose4j denial of service via specifically crafted JWE6.5 Mediumuyuni-common-libsSUSEAnsible: template injection7.1 Highuyuni-common-libsSUSEAlertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint7.5 Highuyuni-common-libsSUSELarge RSA keys can cause high CPU usage in crypto/tls5.3 Mediumuyuni-common-libsSUSEImproper rendering of text nodes in golang.org/x/net/html6.1 Mediumuyuni-common-libsSUSEGrafana vulnerable to Authentication Bypass by Spoofing9.4 Criticaluyuni-common-libsSUSEJWT token compromise can allow malicious actions including Remote Code Execution (RCE)9.4 Criticaluyuni-common-libsSUSEGrafana has Broken Access Control in Alert manager: Viewer can send test alerts4.1 Mediumuyuni-common-libsSUSEGrafana Missing Synchronization vulnerability7.5 High- Show olderLoading…