uyuni-tools vulnerabilities (SUSE)
137 vulnerabilities.
uyuni-toolsSUSESalt junos module uses an unsafe YAML loader which may allow unintended code execution7.3 Highuyuni-toolsSUSECVE-2025-128168.6 Highuyuni-toolsSUSEOpenFGA Improper Policy Enforcement5.8 Mediumuyuni-toolsSUSEInfinite parsing loop in golang.org/x/net5.3 Mediumuyuni-toolsSUSEQuadratic parsing complexity in golang.org/x/net/html5.3 Mediumuyuni-toolsSUSEGithub.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure5.3 Mediumuyuni-toolsSUSEApache Commons OGNL: Expression Injection leading to RCE8.8 Highuyuni-toolsSUSEAn open redirect vulnerability has been identified in Grafana OSS organization switching...4.2 Mediumuyuni-toolsSUSEGrafana is vulnerable to XSS attacks through open redirects and path traversal7.6 Highuyuni-toolsSUSEGrafana's insecure DingDing Alert integration exposes sensitive information4.3 Mediumuyuni-toolsSUSESensitive headers not cleared on cross-origin redirect in net/http6.8 Mediumuyuni-toolsSUSEHTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net4.4 Mediumuyuni-toolsSUSEGNU elfutils eu-readelf readelf.c process_symtab buffer overflow4.8 Mediumuyuni-toolsSUSESecurity update for SUSE Manager Client ToolsNo scoreuyuni-toolsSUSEMisuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto9.1 Criticaluyuni-toolsSUSEDatabase password leaked by systemd uyuni-server-attestation service5.7 Mediumuyuni-toolsSUSEBad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt3.1 Lowuyuni-toolsSUSEGrafana alerting wrong permission on datasource rule write endpoint5.1 Mediumuyuni-toolsSUSEDenial of service via malicious preflight requests in github.com/rs/cors7.5 Highuyuni-toolsSUSEgo-retryablehttp can leak basic auth credentials to log files6.0 Mediumuyuni-toolsSUSEHTTP/2 CONTINUATION flood in net/http7.5 Highuyuni-toolsSUSEUsers outside an organization can delete a snapshot with its key6.5 Mediumuyuni-toolsSUSEIncorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http4.3 Mediumuyuni-toolsSUSEEmail Validation Bypass And Preventing Sign Up From Email's Owner5.4 Mediumuyuni-toolsSUSEAnsible-core: possible information leak in tasks that ignore ansible_no_log configuration5.0 Mediumuyuni-toolsSUSEJinja vulnerable to Cross-Site Scripting (XSS)5.4 Mediumuyuni-toolsSUSEAnsible: template injection7.1 Highuyuni-toolsSUSEOpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics7.5 Highuyuni-toolsSUSEImproper rendering of text nodes in golang.org/x/net/html6.1 Mediumuyuni-toolsSUSEGrafana vulnerable to Authentication Bypass by Spoofing9.4 Criticaluyuni-toolsSUSEUncontrolled Resource Consumption in promhttp7.5 Highuyuni-toolsSUSEImproper Verification of Cryptographic Signature in ansible7.1 Highuyuni-toolsSUSEAnsible Improper Input Validation vulnerability7.8 Highuyuni-toolsSUSEAnsible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems6.6 Mediumuyuni-toolsSUSEAnsible Insertion of Sensitive Information into Log File vulnerability9.8 Criticaluyuni-toolsSUSEImproper Input Validation in ansible2.2 Lowuyuni-toolsSUSEInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical