dracut-saltboot vulnerabilities (openSUSE)
83 vulnerabilities.
dracut-saltbootopenSUSERollup 4 has Arbitrary File Write via Path Traversal8.8 Highdracut-saltbootopenSUSEPublic Dashboards time range restriction on annotations can be bypassed5.3 Mediumdracut-saltbootopenSUSEjsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions9.2 Criticaldracut-saltbootopenSUSEUncontrolled Resource Consumption in @isaacs/brace-expansion9.2 Criticaldracut-saltbootopenSUSEJSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js9.8 Criticaldracut-saltbootopenSUSEDashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation8.1 Highdracut-saltbootopenSUSEUnauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out7.5 Highdracut-saltbootopenSUSEPrototype Pollution Vulnerability in Lodash _.unset and _.omit functions6.9 Mediumdracut-saltbootopenSUSEExpr has Denial of Service via Unbounded Recursion in Builtin Functions7.5 Highdracut-saltbootopenSUSECVE-2025-128168.6 Highdracut-saltbootopenSUSEGithub.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure5.3 Mediumdracut-saltbootopenSUSEAn open redirect vulnerability has been identified in Grafana OSS organization switching...4.2 Mediumdracut-saltbootopenSUSEGrafana is vulnerable to XSS attacks through open redirects and path traversal7.6 Highdracut-saltbootopenSUSEGrafana's insecure DingDing Alert integration exposes sensitive information4.3 Mediumdracut-saltbootopenSUSESecurity update for SUSE Manager Client ToolsNo scoredracut-saltbootopenSUSEMisuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto9.1 Criticaldracut-saltbootopenSUSEDatabase password leaked by systemd uyuni-server-attestation service5.7 Mediumdracut-saltbootopenSUSEBad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt3.1 Lowdracut-saltbootopenSUSEGrafana alerting wrong permission on datasource rule write endpoint5.1 Mediumdracut-saltbootopenSUSEUsers outside an organization can delete a snapshot with its key6.5 Mediumdracut-saltbootopenSUSEEmail Validation Bypass And Preventing Sign Up From Email's Owner5.4 Mediumdracut-saltbootopenSUSEAnsible-core: possible information leak in tasks that ignore ansible_no_log configuration5.0 Mediumdracut-saltbootopenSUSEAnsible: template injection7.1 Highdracut-saltbootopenSUSEGrafana vulnerable to Authentication Bypass by Spoofing9.4 Criticaldracut-saltbootopenSUSEGrafana is an open-source platform for monitoring and observability. Starting with the 9.1...4.2 Mediumdracut-saltbootopenSUSEStored XSS in Graphite FunctionDescription tooltip6.2 Mediumdracut-saltbootopenSUSEDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 Highdracut-saltbootopenSUSEGrafana stored XSS in FileUploader component7.3 Highdracut-saltbootopenSUSEGrafana vulnerable to spoofing originalUrl of snapshots6.7 Mediumdracut-saltbootopenSUSEPrometheus Exporter Toolkit vulnerable to basic authentication bypass6.2 Mediumdracut-saltbootopenSUSEGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password6.7 Mediumdracut-saltbootopenSUSEGrafana contains Improper Input Validation6.4 Mediumdracut-saltbootopenSUSEGrafana users with email as a username can block other users from signing in4.3 Mediumdracut-saltbootopenSUSEData source and plugin proxy endpoints could leak the authentication cookie to some destination plugins6.8 Mediumdracut-saltbootopenSUSEGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins4.9 Mediumdracut-saltbootopenSUSEGrafana plugin signature bypass vulnerability6.1 Mediumdracut-saltbootopenSUSEDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 Highdracut-saltbootopenSUSEMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highdracut-saltbootopenSUSEGrafana folders admin only permission privilege escalation7.6 Highdracut-saltbootopenSUSEAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 Mediumdracut-saltbootopenSUSEgolang.org/x/net/http2 Denial of Service vulnerability7.5 Highdracut-saltbootopenSUSEGrafana account takeover via OAuth vulnerability7.1 Highdracut-saltbootopenSUSEStored XSS in Grafana's Unified Alerting7.3 Highdracut-saltbootopenSUSEGrafana Enterprise datasource network restrictions bypass via HTTP redirects6.6 Mediumdracut-saltbootopenSUSEPrototype Pollution in async7.8 Highdracut-saltbootopenSUSEExposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects8.0 Highdracut-saltbootopenSUSEGrafana directory traversal for `.cvs` files4.3 Mediumdracut-saltbootopenSUSEDirectory Traversal in Grafana4.3 Mediumdracut-saltbootopenSUSEGrafana path traversal7.5 Highdracut-saltbootopenSUSECross organization admin control in Grafana9.1 Critical- Show olderLoading…